NEWSPAPER 


Q&A:  Sun’s  John  Loiacono  on  the  company’s  plan  to  open-source  Solaris: 
BearingPoint  raises  China’s  profile  as  an  offshore  outsourcing  destination,  -  h 
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Julia  Kinq  expla 


Outsourcing  is  fraught  with  political  risks,  from  employee 
angst  to  customer  dissatisfaction  and  PR  nightmares. 


ing  explains  how  to  manage  or  even  prevent  the  backlash. 


DamageControl 


Australian  Firm  Wrestles  With 
ERP  Delays,  $11.5M  Overrun 


Problems  lead  to  IT 
overhaul;  PeopleSoft 
could  face  legal  action 

BY  MARC  L.  SONGINI 

Problems  with  the  installation 
of  an  ERP  system  at  Australia- 
based  Crane  Group  Ltd.  have 
led  to  an  estimated  cost  over¬ 
run  of  $11.5  million  and  a  reor¬ 


ganization  of  the  company’s 
IT  operations.  The  difficulties 
may  also  lead  to  financial 
claims  against  PeopleSoft  Inc., 
according  to  Crane  officials. 

No  legal  proceedings  have 
been  started  against  People- 
Soft,  a  Crane  spokeswoman 
said  last  week.  But  she  added 
that  the  company  is  exploring 
all  options  because  the  prob¬ 


lems  and  delays  on  the  ERP 
project  caused  “quite  a  disrup¬ 
tion  to  Crane’s  business  over 
the  last  couple  of  years.” 

The  spokeswoman  said 
Crane  has  spent  an  estimated 
$49  million  (U.S.)  on  the  proj¬ 
ect,  which  began  in  early  2001 
and  was  originally  due  to  be 
completed  last  year.  She  de¬ 
clined  to  specify  the  nature  of 
the  problems,  saying  only  that 
the  rollout  has  been  difficult 
and  that  Crane  and  PeopleSoft 
are  engaged  in  discussions 
about  the  project. 

Crane,  which  expects  to  re¬ 
port  revenue  of  about  $1.5  bil¬ 
lion  for  the  fiscal  year  that 
ended  June  30,  makes  prod- 

ERP  Delays,  page  45 

INSIDE  ^eopleSoft  warns  of  a  Q2 

revenue  shortfall  -  and  it's  not  the  only 
software  vendor  to  do  so.  Page  10 


E-mail  Glitch 
oses  Flaw 
ivacy  Law 


Inadvertent  release  of  county  employee  data  to 
Swedish  company  leads  to  California  inquiry 


BY  DAN  VERTON 

IT  officials  in  Contra  Costa 
County,  Calif.,  last  week 
launched  an  investigation 
into  how  hundreds  of  internal 
e-mails  that  contained  private 
employee  data  ended  up  in 
the  in-box  of  a  Swedish  com¬ 
pany.  And  now  legal  analysts 
say  the  incident  has  revealed 
major  weaknesses  in  Califor¬ 
nia’s  landmark  pri¬ 
vacy  law. 

The  investigation 
was  launched  after 
Computerworld  notified  the 
county  on  July  6  that  Robert 
Carlesten,  managing  director 
of  Internet  company  Ord&Bild 
AB  in  Karlstad,  Sweden,  had 
produced  dozens  of  e-mails 
that  he  said  had  been  arriving 
at  his  Internet.ac  domain  reg¬ 
ularly  for  the  past  two  years. 
Carlesten  said  he  responded 
to  the  senders  of  the  e-mails 


on  multiple  occasions  to  in¬ 
form  them  of  the  problem  but 
never  received  a  reply. 

In  addition  to  a  deluge  of 
administrative  communica¬ 
tions  from  the  county’s  De¬ 
partment  of  Information  Tech¬ 
nology  and  its  human  re¬ 
sources  director,  the  e-mails 
contained  detailed  discussions 
and  attachments  related  to  the 
payroll  files  for  the 
county’s  Superior 
Court  as  well  as 
current  and  former 
employee  benefits.  Many  of 
the  e-mails  contain  the  names, 
employee  ID  numbers  and 
benefits  information  of  Supe¬ 
rior  Court  commissioners  and 
other  workers.  Computerworld 
broke  the  story  on  its  Web  site 
on  July  6  [QuickLink  47999], 
Tom  Whittington,  CIO  for 
the  Contra  Costa  County  gov- 
Privacy  Law,  page  45 


INVESTIGATIVE 

REPORT 


IT  by  Committee 


SPECIAL 

REPORT 


IT  governance  and 
steering  committees 
are  winning  adher¬ 
ents  such  as  Cathy  Brune,  CTO  at 
Allstate  Insurance.  But  recent  stud¬ 
ies  indicate  that  many  companies 
remain  holdouts.  Thomas  Hoffman 
reports  on  the  adoption  of  formal 
IT  governance  processes.  PAGE  6 


The  ultra  reliable  IBM  eServer  xSeries  365  system  -  with  powerful  Intel®  Xeon™  processors  -  can  make  your  work,  and 
IT  selection  process,  easier.  With  three  levels  of  memory  protection  and  a  comprehensive  monitoring  of  key  components,  it’s 
all  about  uptime.  So  you  get  outstanding  reliability  when  running  mission-critical  ERP,  collaboration  and  database  applications. 
The  works.  Management  is  easier,  too.  You  can  have  around-the-clock  remote  access,  on  demand.  And  system  status  can  be 
available  even  when  powered  off.  For  more  on  highly  available,  manageable  xSeries  servers,  go  to  ibm.com/eserver/advantage 


5  reasons  more  and  more  businesses  are  turning  to  IBM  eServer ™  xSeries  systems  with  Intel  Xeon  processors. 
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hardware  support.1 

models.  Pay  as  you  grow. 
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The  easy  choice.  Dependability. 
IBM  eServer  xSeries  365  system. 


'Additional  charges  apply.  Standard  support  includes  next-business-day  response  in  some  countries.  IBM.  the  e-business  logo,  eServer.  the  eServer  logo  and  xSeries  are  trademarks  or  registered  trademarks  ol  International 
Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Intel,  Intel  Inside,  the  Intel  Inside  logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the 
United  States  and  other  countries.  Other  company  product  and  service  names  may  be  trademarks  or  service  marks  ot  others.  @ 2004  IBM  Corporation.  All  rights  reserved. 


The  right  management  should  do  more  than  just  protect. 

It  should  also  enable. 

eTrust™  Security  Management  Software 

With  eTrust  security  management  software,  your  information  isn't  just  safeguarded  from  internal  and  external  threats. 
We  provide  authorized  customers,  partners,  and  employees  with  appropriate  access  that  can  help  your  business  grow. 
In  addition  to  securing  data,  eTrust  also  provides  a  single  view  of  your  security  environment,  so  you  can  make  real-time 
decisions  based  on  comprehensive  information.  If  you're  looking  for  ways  to  minimize  risk  while  maximizing  your 
potential,  or  to  get  a  white  paper,  go  to  ca.com/security. 
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The  Coming  Robot  Revolution 

Also  in  this  week’s  Technology  section: 

After  spending  decades  mostly  in  facto¬ 
ries,  robots  will  begin  playing  roles  in 
homes  and  offices,  experts  say.  Page  26 
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Worm  Wars 


In  this  week’s  Technology  section: 

As  new  worms  and  viruses 


appear  at  an  ever-quickening  pace, 
companies  need  much  more  than 
a  traditional  perimeter  defense  in 
order  to  fend  them  off.  Page  21 
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IT  governance 
committees 
vary  in  their  ap¬ 
proaches,  and  many  companies 
don’t  involve  their  top  execu¬ 
tives  -  or  even  have  such 
panels.  Page  6 


MIT  research  finds  a  correlation 
between  good  governance  and 
higher  profits.  Page  6 


IT  executives  say  Sarbanes- 
Oxley  isn’t  a  big  factor  in  their 
IT  governance  efforts.  Page  7 
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projects. 
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12  Microsoft  gives  users  more 
options  for  support  through 
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outsourcing  venue. 
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have  wasted  billions  of  tax¬ 
payer  dollars,  the  GAO  says. 


31  Damage  Control.  Backlash 
over  offshore  outsourcing  has 
triggered  productivity  and 
revenue  losses.  Here’s  how 
to  control  the  damage. 

34  Managing  ‘Real’  Risks.  Risk 
management  is  an  idea  whose 
time  has  finally  come,  says 
Cutter  Consortium  analyst 
and  author  Tom  DeMarco.  He 
explains  how  to  embrace  risk 
and  reap  the  rewards. 

35  Q&A:  Moving  Targets.  Com¬ 
panies  go  through  innovation 
stages,  so  IT  needs  to  provide 
the  right  help  at  the  right 
time,  says  Geoffrey  A.  Moore. 

36  Career  Watch.  How  to  land 
an  IT  job  in  today’s  market. 
Plus,  burning  the  midnight  oil 
in  Britain,  and  hot  summer 
reading  for  IT  execs. 
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38  Bart  Perkins  thinks  that, 
rather  than  engaging  in  “des¬ 
peration  outsourcing,”  compa¬ 
nies  are  better  off  investing  in 
a  sound  project  to  bring  a  bro¬ 
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46  Frankly  Speaking:  Frank 
Hayes  wonders  what  Contra 
Costa  County,  Calif.,  could 
have  done  to  keep  sensitive 
e-mail  from  going  astray.  Not 
much,  he  figures. 
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IT  Governance  Is 
On  the  Hot  Seat 

Committees  of  IT  and  business  execs  oversee 
spending  at  some  companies,  but  surveys  find 
lots  of  skeptics.  By  Thomas  Hoffman 


Before  Allstate  Insur¬ 
ance  Co.  formed  a  cap¬ 
ital  spending  commit¬ 
tee  with  IT  governance 
responsibilities  about  18 
months  ago,  the  process  of 
prioritizing  IT  projects  typi¬ 
cally  was  decided  by  “who¬ 
ever  spoke  the  loudest  or 
whoever  had  the  biggest 
checkbook,”  said  Chief  Tech¬ 
nology  Officer  Cathy  Brune. 

Now  Brune  and  some  top 
Allstate  executives,  including 
the  chairman  and  CEO  and  the 
chief  financial  officer,  collec¬ 
tively  decide  how  to  prioritize 
IT  initiatives  based  on  busi¬ 
ness  needs.  “They  help  me  de¬ 
cide  where  to  spend  our  mon¬ 
ey,”  Brune  said,  noting  that  the 
new  approach  to  IT  gover¬ 
nance  gives  the  business  exec¬ 
utives  a  better  understanding 
of  the  IT  spending  process. 

IT  governance  committees 
like  the  one  at  Allstate  are  be¬ 
coming  more  commonplace  as 
companies  aim  to  better  align 
their  IT  operations  with  busi¬ 
ness  goals.  The  idea  behind 
such  committees  is  to  bring 
together  key  IT  and  business 
managers  and  give  them  joint 
responsibility  for  making  deci¬ 
sions  about  technology  priori¬ 
ties  and  investments. 

But  the  specific  IT  gover¬ 
nance  techniques  being  used 
by  different  companies  vary 
widely,  according  to  more 
than  a  dozen  IT  managers, 
researchers  and  academics 
interviewed  for  this  article. 
Moreover,  many  companies 
have  yet  to  adopt  governance 
processes  that  include  direct 
input  about  IT  from  CEOs, 
other  senior  executives  and 
board  members  —  a  situation 


that  some  analysts  think  could 
hamper  efforts  to  align  IT  and 
business. 

“Top  management  is  still 
not  involved  enough  yet,”  said 
Gary  Hardy,  technical  coordi¬ 
nator  at  the  IT  Governance 
Institute  (ITGI)  in  Rolling 
Meadows,  Ill.  CEOs  and  other 
high-level  executives  often 
recognize  IT’s  importance  to 
their  companies,  he  said,  “but 
the  CIO  still  tends  to  drive  IT 
governance  initiatives  more 
than  top  management.” 

The  use  of  IT  governance 
committees  is  by  no  means 


universal.  In  a  survey  due  for 
release  this  month  that  was 
conducted  for  the  ITGI  by 
PricewaterhouseCoopers,  76% 
of  the  335  CEOs  and  CIOs 
who  responded  said  they’re 
aware  of  IT  problems  that 
could  be  resolved  if  they  had  a 
formal  governance  framework. 
But  42%  said  they  have  no 
plans  to  create  IT  governance 
programs  involving  executive- 
level  steering  and  board-level 
strategy  committees. 

In  a  recent  online  survey  of 
about  200  IT  executives  and 
CFOs  at  companies  in  North 
America  and  Europe,  Meta 
Group  Inc.  found  that  less 
than  20%  of  the  respondents 
have  set  up  corporate  or  IT 
governance  committees  with 
formal  memberships  and  char¬ 
ters  [QuickLink  47304].  Mean¬ 
while,  analysts  have  said  that 
they’re  aware  of  only  a  small 
number  of  companies  with  IT 
oversight  panels  that  include 
members  of  their  boards  of  di¬ 
rectors  [QuickLink  46892]. 

Even  companies  with  IT 
steering  committees  may  not 
be  fully  prepared  from  a  gov¬ 
ernance  standpoint  if  the  pan- 


Companies  that  don’t  have  for¬ 
mal  IT  governance  committees 
might  want  to  take  heed  of  the 
following:  Businesses  with  su¬ 
perior  governance  practices 
generate  20%  greater  profits 
on  average  than  other  compa¬ 
nies  that  share  similar  goals  of 
making  IT  spending  more  ef¬ 
fective  and  better  aligning 
technology  resources  with 
business  needs,  according  to 
an  MIT  study. 

The  study,  conducted  by  the 
Center  for  Information  Sys¬ 
tems  Research  (CISR)  at  MIT’s 
Sloan  School  of  Management, 
examined  IT  governance 
processes  and  profitability  at 
256  companies  from  2001  to 
mid-2003.  The  findings  were 
published  last  month  in  a  book 
titled  IT  Governance:  How  Top 
Performers  Manage  IT  Deci¬ 
sion  Rights  for  Superior  Re- 


At  a  high 
level,  we 
look  at  what 
business  needs 
to  accomplish 
and  how  we  pri¬ 
oritize  project 
deliverables. 

JAY  GARDNER,  CIO.  BMC  SOFTWARE 


suits  (Harvard  Business 
School  Press). 

CISR  Director  Peter  Weill, 
who  helped  lead  the  study  and 
co-authored  the  book,  said 
companies  with  effective  IT 
governance  tend  to  have  joint 
decision-making  between 
business  and  IT  managers  on 
prioritizing  technology  projects 
and  other  key  issues. 

But  Weill  noted  that  compa¬ 
nies  with  world-class  IT  gover¬ 
nance  techniques,  such  as 
State  Street,  United  Parcel 
Service  Inc.  and  insurer  and  fi¬ 
nancial  services  firm  USAA, 
often  use  completely  different 
approaches.  “I  think  the  lesson 
here  is  that  you  have  to  have 
governance  tailored  to  what 
you’re  trying  to  achieve,”  he 
said. 

State  Street  CIO  Joe  Anton- 
ellis  said  he  hasn’t  done  the 


els  include  business  unit  man¬ 
agers  and  department  heads 
but  not  top  corporate  execu¬ 
tives,  said  Rob  Austin,  a  fellow 
at  Cutter  Consortium  in  Ar¬ 
lington,  Mass.,  and  a  professor 
at  Harvard  Business  School. 

Such  committees  “don’t  ad¬ 
dress  the  overarching  gover¬ 
nance  problem  at  an  executive 
level,”  Austin  said,  adding  that 


kind  of  financial-return  analy¬ 
sis  that  the  CISR  did  to  gauge 
the  effectiveness  of  the  bank’s 
IT  governance  model.  But  he 
thinks  State  Street’s  gover¬ 
nance  processes  are  helping 
the  company  spend  its  IT  bud¬ 
get  more  effectively  and  en¬ 
abling  it  to  earmark  more  mon¬ 
ey  for  projects  that  support 
business  initiatives  aimed  at 
increasing  revenue. 

The  bank’s  overall  IT  costs 
have  remained  flat  since  An- 
tonellis  became  CIO,  while  its 
IT  workforce  is  23%  smaller. 

In  addition,  State  Street  now 
invests  about  30%  of  its  IT 
spending  on  new-revenue  proj¬ 
ects  and  uses  the  other  70% 
for  day-to-day  IT  operations, 
Antonellis  said.  That’s  an  im¬ 
provement  over  the  25%/75% 
spending  split  that  he  inherit¬ 
ed.  Antonellis  added  that  his 
goal  is  to  push  IT  spending  re¬ 
lated  to  new  revenue  opportu¬ 
nities  to  40%  of  the  overall 
budget  by  the  end  of  next  year. 

-  Thomas  Hoffman 
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Too  expensive 

28% 

Lack  of  required  skills 

20% 

Formal  solutions  won’t  work 

17% 

No  IT  problems  to  fix 

11% 

Company  is  too  small 

11% 

Too  difficult  to  implement 

7% 

Others 

29% 

Base  46  CEOs  and  CIOs  surveyed  as  part  of  a  wider  study;  multiple  responses  allowed. 

SOURCE  IT  GOVERNANCE  INSTITUTE  ROLLING  ME  ADOWS.  ILL  AND 

PRICE  WATEREIOUSECOOPERS.  NEW  YORK 

boards  of  directors  also  need 
to  be  involved  in  overseeing 
IT.  “It  seems  to  me  that  there’s 
a  train  wreck  due  sometime 
. . .  where  inattentive  boards 
are  not  going  to  know  what  hit 
them  when  they  have  an  IT 
disaster,”  he  said. 

At  Allstate,  business  units 
are  responsible  for  funding 
maintenance  and  upgrades  of 
their  own  applications.  But 
Brune  said  IT  spending  is 
managed  at  a  group  level,  and 
money  is  moved  around  be¬ 
tween  units  as  needed.  The 
capital  allocation  committee, 
which  also  includes  represen¬ 
tatives  from  the  Northbrook, 
Ill.-based  insurer’s  two  main 
operating  units,  has  to  ap¬ 
prove  all  IT  projects  budgeted 
at  more  than  $5  million,  or  $25 
million  over  five  years. 

Effective  IT  governance 
“makes  you  more  nimble 
about  what  you  do,”  Brune 
said,  adding  that  Allstate’s  ap¬ 
proach  helps  avoid  political 
infighting  that  can  slow  down 
decision-making. 

Other  companies  have  IT 
governance  goals  that  are  sim¬ 
ilar  to  the  ones  espoused  by 
Brune.  But  they  have  adopted 
somewhat  different  tactics  for 
achieving  their  objectives. 

Earlier  this  year,  Cleveland- 
based  KeyCorp  formed  a  tech¬ 
nology  advisory  board  that  in¬ 
cludes  CTO  Robert  Rickert, 
the  bank’s  CFO  and  the  head 
of  each  business  unit.  The 
board  meets  regularly  to  pri¬ 
oritize  and  manage  the  $100 
million  in  IT  project  spending 
planned  for  this  year,  said  Bob 


Dutile,  an  executive  vice  presi¬ 
dent  in  the  company’s  Key 
Technology  Services  Group. 

In  the  past,  IT  governance 
at  KeyCorp  consisted  of  the 
bank’s  CFO  measuring  IT 
spending  by  line  of  business, 
Dutile  said.  By  last  year,  the 
prioritization  of  IT  projects 
was  done  “more  ad  hoc  at  the 
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The  more  structured  gover 
nance  process  now  in  place 
ensures  that  KeyCorp  has  a 


A  Governance 
Framework 

IT  STRATEGY  COMMITTEE 

■  Provides  insight  and 
advice  to  the  board  of 
directors  on  IT  topics 

■Gives direction  on 
IT  strategy  to  senior 
management 

■Can  include  board 
members,  key  execu¬ 
tives  and  external  IT 
experts 

IT  STEERING  COMMITTEE 

■  Makes  decisions  on  IT 
spending  levels,  project 
plans  and  other  opera¬ 
tions  issues 

■  Oversees  day-to-day 
management  of  projects 
and  the  delivery  of  IT 
services  to  end  users 

■  Can  include  senior  ex¬ 
ecutives,  business  unit 
leaders  and  IT  managers 

SOURCE  IT  GOVERNANCE  INSTI¬ 
TUTE.  ROLLING  MEADOWS.  ILL. 


explicit  approach  for  allocat¬ 
ing  IT  funding,  Dutile  said. 

When  Jay  Gardner  became 
CIO  at  BMC  Software  Inc. 
three  years  ago,  he  discovered 
that  the  Houston-based  soft¬ 
ware  vendor  had  128  IT  proj¬ 
ects  in  progress,  many  of 
which  had  no  business  owners 
or  return-on-investment  crite¬ 
ria  attached  to  them.  Gardner 
spurred  the  creation  of  an  in¬ 
formal  committee  to  oversee 
IT  decision-making,  and  BMC 
made  the  group  a  formal  entity 
last  September. 

The  IT  executive  board 
meets  at  least  monthly,  but  be¬ 
tween  February  and  May,  it 
met  every  two  weeks  because 
“we  had  a  lot  of  projects  to 
prioritize,”  Gardner  said.  The 
board  includes  senior  man¬ 
agers  from  each  department,  a 
representative  from  BMC’s  in¬ 
ternational  operations  and  its 
chief  accounting  officer.  Gard¬ 
ner  and  BMC’s  director  of  IT 
operations  are  also  members. 

“At  a  high  level,  we  look  at 
what  the  business  needs  to  ac¬ 
complish  and  how  we  priori¬ 
tize  project  deliverables,”  said 
Gardner.  The  members  of  the 
board  “not  only  make  the  de¬ 
cisions,  but  they  come  with 
their  checkbooks,”  he  added. 

Each  of  the  six  business 
units  at  Wyeth,  a  maker  of 
pharmaceuticals  and  other 
health  care  products,  has  its 
own  IT  steering  committee 
with  a  liaison  from  the  IT  de¬ 
partment.  But  some  large  proj¬ 
ects  are  vetted  by  an  execu¬ 
tive-level  committee  that  in¬ 
cludes  CIO  Bruce  Fadem,  plus 
Madison,  N.J.-based  Wyeth’s 
CEO  and  CFO  and  the  man¬ 
agers  of  its  six  business  units. 

For  example,  if  Wyeth’s  con¬ 
sumer  health  care  products 
group  has  25  IT  projects  plot¬ 
ted  out  over  the  course  of  a 
year,  the  executive  committee 
will  monitor  the  largest  two  or 
three,  Fadem  said.  Even  so, 
much  of  the  accountability  for 
the  IT  projects  resides  within 
the  business  units  themselves. 

“What  we’ve  done  is  put  the 
prioritization  of  IT  invest¬ 
ments  in  the  hands  of  our 
business  managers,”  Fadem 
said.  “To  think  that  senior 
management  can  sit  in  a  com¬ 
mittee  meeting  and  rank  proj- 


IT  Execs  Downplay  Role  of 
Sarbanes-Oxiey  in  Governance 


The  relatively  low  levels  of  inter¬ 
est  in  creating  IT  governance 
committees  found  by  the  ITGI 
and  Meta  Group  surveys  are 
alarming,  considering  the 
heightened  emphasis  that  the 
Sarbanes-Oxiey  Act  has  placed 
on  overall  corporate  gover¬ 
nance.  said  Adrian  Bowles, 
director  of  education  and  re¬ 
search  at  the  IT  Compliance 
Institute  in  Seattle. 

Bowles  said  he  expects  atti¬ 
tudes  to  change  as  the  dead¬ 
lines  for  complying  with  the 
financial  reporting  law  begin  to 
draw  near.  “Certainly,  more 
companies  are  trying  to  get 
serious  about  IT  governance, 
whereas  four  or  five  years  ago, 
not  a  lot  of  people  were  talking 
about  it,"  he  said.  “As  we  get 
into  crunch  time  for  Sarbanes- 
Oxiey  [compliance],  we’re  go¬ 
ing  to  see  more  formal  evi¬ 
dence  of  IT  governance.” 

But  none  of  the  IT  execu¬ 
tives  interviewed  for  this  story 
said  Sarbanes-Oxiey  played  an 
instrumental  role  in  driving  their 
companies’  IT  governance  ef¬ 
forts.  Instead,  they  cited  factors 
such  as  a  desire  to  better  align 
IT  strategies  with  the  needs  of 
business  units. 

MasterCard  International 


ects  in  order  just  isn’t  practi¬ 
cal.  They  might  know  the  top 
five  criteria  for  a  project,  but 
not  beyond  that.” 

One  of  the  companies  that 
analysts  cite  as  a  leader  in  IT 
governance  is  State  Street 
Corp.,  a  financial  services  firm 
in  Boston.  Nearly  three  years 
ago,  State  Street  formed  an 
IT  executive  council  that  cur¬ 
rently  includes  CIO  Joe  An- 
tonellis,  the  company’s  CEO, 
its  vice  chairman  and  the 
heads  of  its  three  business 
units.  The  group  meets  every 
six  weeks  to  review  IT  spend¬ 
ing  levels  and  look  at  how 
State  Street’s  3,200  IT  workers 
are  distributed  among  proj¬ 
ects,  Antonellis  said. 

When  Antonellis  became 
CIO  18  months  ago,  he  formed 


Inc.  has  an  IT  steering  commit¬ 
tee  that  meets  every  six  weeks 
or  so  and  includes  IT  represen¬ 
tatives  and  business  managers 
from  each  of  the  four  regions 
where  the  Purchase,  N.Y.- 
based  company  operates.  The 
committee  categorizes  pro¬ 
posed  IT  projects  and  then 
ranks  them  in  importance 
based  on  business  needs  and 
projected  paybacks,  said 
James  Whalen,  senior  vice 
president  of  finance  and  ad¬ 
ministration  at  MasterCard’s 
global  technology  organization. 

MasterCard  has  changed 
from  being  a  member-owned 
company  to  one  that’s  publicly 
traded,  increasing  the  amount 
of  financial  disclosures  it  needs 
to  make.  But  Sarbanes-Oxiey 
“isn’t  a  primary  driver"  for  its  IT 
governance  efforts,  Whalen 
said.  IT  governance  would 
have  become  more  important 
at  MasterCard  even  if  the  law 
never  came  into  play,  accord¬ 
ing  to  Whalen. 

“I  think  this  is  tangential  [to 
Sarbanes-Oxiey],  because  our 
investment  decisions  are  sig¬ 
nificantly  more  transparent  and 
require  a  significant  amount  of 
communications,"  he  said. 

-  Thomas  Hoffman 


an  office  of  IT  strategy  and 
governance  within  State 
Street’s  IT  department.  The 
strategy  and  governance  of¬ 
fice,  which  is  run  by  his  chief 
of  staff,  sets  internal  technical 
standards  and  oversees  every¬ 
thing  from  IT  architecture 
decisions  to  technology  risk 
management  procedures. 

Despite  State  Street’s  two¬ 
pronged  strategy  for  governing 
IT,  Antonellis  said  the  firm 
continues  to  wrestle  with 
thorny  issues  such  as  how  to 
migrate  the  governance  model 
to  its  overseas  divisions. 
“That’s  a  challenge,”  he  said, 
adding  that  State  Street  hopes 
to  ease  the  process  by  stan¬ 
dardizing  globally  on  develop¬ 
ment  tools  from  IBM’s  Ratio¬ 
nal  Software  unit.  ©  48025 
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Sprint  Taps  IBM 
For  More  IT  Work 

Sprint  Corp.  announced  a  five- 
year  IT  services  deal  with  IBM 
that  expands  the  scope  of  an  ini¬ 
tial  agreement  the  two  companies 
signed  in  September.  Under  the 
new  contract,  which  is  valued  at 
more  than  $400  million,  IBM 
Global  Services  will  take  over  ap¬ 
plication  development  and  main¬ 
tenance  on  some  Sprint  systems. 
About  1,000  IT  workers  will  trans¬ 
fer  to  IBM  as  part  of  the  deal. 


SAP  Says  It  Will 
Top  Q2  Forecast 

SAP  AG  said  it  will  report  second- 
quarter  revenue  of  about  $2.2  bil¬ 
lion,  up  9%  from  the  year-earlier 
level  and  slightly  more  than  finan¬ 
cial  analysts  had  projected.  Soft¬ 
ware  license  sales  should  total 
$614  million,  a  15%  increase  over 
last  year’s  second  quarter.  SAP’s 
showing  is  in  contrast  to  warnings 
by  other  software  vendors  that 
their  results  will  be  lower  than  ex¬ 
pected  (see  story,  page  10). 


Mozilla  Issues  Fix 
To  Windows  Users 

The  Mozilla  Foundation  issued  a 
software  patch  designed  to  plug  a 
security  hole  that  could  affect 
users  who  run  its  open-source 
Mozilla  Application  Suite,  Firefox 
browser  and  Thunderbird  e-mail 
client  on  Windows  systems.  The 
patch  disables  use  of  the  “shell:” 
external  protocol  handler,  which 
attackers  could  exploit  to  run  ma¬ 
licious  code.  Users  of  Linux  and 
Macintosh  systems  aren’t  at  risk, 
the  foundation  said. 


Short  Takes 

A  California  judge  approved  the 
$1.1  billion  settlement  of  a  class- 
action  lawsuit  filed  in  that  state 
against  MICROSOFT  CORP.  over 
its  pricing  policies  [QuickLink 
35711] ....  PEOPLESOFT  INC.  up¬ 
graded  the  manufacturing  asset 
management  module  in  its  Enter- 
priseOne  line  of  business  applica¬ 
tions  for  midsize  users. 


CAM  TUC  UADI#  !  HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
UN  I  I1L  mftHA  i  NEWS  AND  INDUSTRY  GOSSIP  BY  MARK  HALL 


Reach  Path  to 
‘Linux  Nirvana’. . . 


. . .  with  archiving  tool  for  data  center.  That’s  the  message 
from  major  software  vendors  that  have  jumped  on 
the  information  life-cycle  management  bandwagon. 
SAP  AG  will  release  an  ILM  product,  possibly  this 
summer,  based  on  technology  from  OuterBay  Tech¬ 
nologies  Inc.  And  Sybase  Inc.  in  Dublin,  Calif.,  has 


just  begun  offering  Outer- 
Bay’s  ILM  technology,  joining 
PeopleSoft  Inc.,  Oracle  Corp., 
EMC  Corp.  and  other  compa¬ 
nies  anxious  to  get  users  to 
migrate  their  dusty  data  from 
high-priced  proprietary 
servers  to  cheaper  Linux  ma¬ 
chines.  But  Michael  Howard, 
CEO  of  Cupertino,  Calif.- 
based  OuterBay,  thinks  these 
software  giants  want  to  prod 
you  toward  “a  Linux  nirvana,” 
where  even  your  pricey  pro¬ 
duction  machines,  not  just 
the  ones  with  archived  data, 
are  low-cost,  commodity  Lin¬ 
ux  boxes.  Howard  claims  the 
software  vendors  are  discov¬ 
ering  that  their  products  run 
plenty  fast  on 
Linux  systems 
once  the  old 
data  has  been 
moved  else¬ 
where,  so 
they’re  en¬ 
couraging  you 
to  dump  vir¬ 
tually  all  of 
your  propri¬ 
etary  Unix 


systems.  “For  software  ven¬ 
dors,  every  dollar  you  take 
away  from  hardware  procure¬ 
ment  leaves  you  more  to 
spend  on  software,”  he  says. 

A  diabolical  plot?  Or  a  gift 
from  heaven? 

Linux  Lovers  Should 
Forget  Feud  With . . . 

. . .  Windows  and  think  above  and 
below  the  operating  system. 

That’s  the  advice  from  Tim 
O’Reilly,  CEO  of  O’Reilly  Me¬ 
dia  Inc.  in  Sebastopol,  Calif. 
The  publisher  of  open-source 
books  and  the  impresario  of 
the  O’Reilly  Open  Source 
Convention  being  held  later 
this  month  in  Portland,  Ore., 
argues  that  by  emphasizing 
the  operating  system  struggle, 
open-source  zealots  overlook 
opportunities  to  build  suc¬ 
cessful  business  alternatives 
to  proprietary  technologies. 
He  points  to  Google,  Ama- 
zon.com  and  other  successful 
Internet  businesses  that  are 
built  on  top  of  Linux,  as  well 
as  Indianapolis-based  hard¬ 
ware  maker  Progeny  Linux 


Systems  Inc.,  which  builds  its 
business  below  the  operating 
system.  “A  lot  of  the  Linux 
community  is  fixated  on  beat¬ 
ing  Microsoft,”  he  says.  “But 
value  is  moving  up  and  down 
the  stack,  as  these  companies 
show.”  In  contrast  to  what 
was  written  here  two  weeks 
ago  [QuickLink  47772], 
O’Reilly  thinks  the  desktop 
opportunities  for  Linux  are 
alive  and  well.  Especially 
with  Novell  Inc.’s  purchase  of 
SUSE  and  Ximian,  which  en¬ 
ables  the  Orem,  Utah-based 
company’s  brand-name 
recognition  in  the  enterprise 
to  be  used  as  ammo  in  the 
desktop  wars. 


26% 

The 

business 
process  sav¬ 
ings  that  Ab¬ 
erdeen  says 
telcos  can 
gain  using 
new  tools. 


IT  Departments  Worry 
That  Chargeback . . . 

. . .  systems  “will  expose  them 
much  more  internally,”  says 
Richard  Simons,  chief  operat¬ 
ing  officer  at 
MBG  in  New 
York.  Once  in¬ 
ternal  cus¬ 
tomers  learn 
the  minutiae 
of  how  much 
IT  is  charging 
them,  they 
have  critical 
data  by  which 
to  measure  IT 
against  exter¬ 
nal  offerings.  However,  the 
greater  the  detail,  Simons  ar¬ 
gues,  the  less  time  CIOs  will 
waste  in  acrimonious  meet¬ 
ings  justifying  budget  assess¬ 
ments.  “Breaking  out  the 
costs  shows  the  value  users 
get,”  he  says.  “Visibility  is 
what  helps  keep  IT  honest.” 
MBG  offers  tools  for  detailing 
everything  from  IT  to  tele¬ 
communications  charges.  In 
the  latter  category,  telcos 
have  cut  delivery  costs  nearly 
to  the  bone,  so  they’re  look¬ 
ing  to  automate  on  business 
processes  using  XML,  he  says. 


Automate  Multisource 
Information . . . 

. . .  workflow  in  a  high-volume 
environment  with  Interchange, 


a  new  product  from  Captaris 
Inc.  in  Bellevue,  Wash.  Set  to 
ship  the  first  week  of  Septem¬ 
ber,  .Net-based  Interchange 
takes  vast  numbers  of  files, 
like  e-mails,  faxes  and  spread¬ 
sheets,  and  routes  them  to  the 
appropriate  recipients,  tracks 
their  progress,  handles  excep¬ 
tions  and  delivers  reports  to 
management  on  workflow 
status.  Pricing  will  start  at 
$20,000. 

GIS  Data  Shifts 
IT  Landscape . . . 

...  for  tools  in  the  field.  Today’s 
modern  civil  engineers  plant 
stakes  equipped  with  global 
positioning  systems,  and  this 
year  Caterpillar  Inc.  made 
GPS  standard  on  all  of  its 
earth-moving  equipment,  ob¬ 
serves  Chris  Bradshaw,  vice 
president  of  the  information 
solutions  divisions  at  Auto¬ 
desk  Inc.  in  San  Rafael,  Calif. 
He  says  these  are  only  some 
of  the  changes  occurring  in 
geographic  information  sys¬ 
tems  that  are  forcing  IT  to 
rethink  the  way  it  outfits  sys¬ 
tems  deployed  in  the  field  as 
well  as  the  way  the  data  gets 
processed  back  in  the  data 
center.  First,  Bradshaw  points 
out,  real-time  information 
isn’t  necessary  for  GIS  users 
who  carry  laptops  in  the  field 
—  a  daily  up¬ 
date  back  at 
the  office 
works  fine. 

That  means 
less  concern 
about  wire¬ 
less  problems. 

Another  point 
that  Bradshaw 
raises  is  the 
lack  of  a  stan¬ 
dard  for  storing  GIS  data. 
“Oracle  is  way  ahead  of  the 
game,”  but  only  on  the  high 
end,  he  says.  If  an  industry 
standard  does  appear,  Brad¬ 
shaw  says  Autodesk  will  sup¬ 
port  it.  In  the  meantime,  buy 
lots  of  disk  drives;  GIS  data 
eats  them  like  candy. 

©  48069 
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this  webcast  to  learn  more. 
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Purchasing  Delays  Cause 
Software  Sales  Shortfalls 


Vendors  miss  second-quarter  targets, 
blame  spending  drop-off  in  US.  in  June 


Q2  Misses 


EXPECTED  SALES 


S865M-S885M 


REVISED  FIGURES 


S830M-S850M 


PeopleSoft 

$675M-$690M 

S655M-S665M 

Veritas 

S490M-S505M 

$475M*$485M 

S345M-S355M 

S318M-S328M 

S353M 

S301M 

Sybase 

S199M 

S188M-S192M 

FileNet 

$10011 

S93M-S95M 

BY  LUCAS  MEARIAN 
AND  MARC  L.  SONGINI 

IX  top  software  ven¬ 
dors  warned  last  week 
that  they  will  report 
lower-than-projected 
revenues  for  the  second  quar¬ 
ter,  blaming  a  slowdown  in 
spending  by  U.S.  customers 
last  month. 

PeopleSoft  Inc.,  Computer 
Associates  International  Inc., 
Siebel  Systems  Inc.,  Veritas 
Software  Corp.,  BMC  Software 
Inc.  and  FileNet  Corp.  all  said 
they  missed  their  revenue  tar¬ 
gets  for  the  quarter.  The  caval¬ 
cade  of  announcements  fol¬ 
lowed  a  similar  warning  from 
Sybase  Inc.  on  July  1. 

Sybase  cited  execution 
problems  in  its  North  Ameri¬ 
can  sales  unit,  and  PeopleSoft 
pointed  a  finger  at  the  fallout 
from  the  trial  in  which  the  U.S. 
Department  of  Justice  is  trying 
to  block  Oracle  Corp.’s  hostile 
takeover  bid  for  the  company. 
But  a  common  thread  among 
all  seven  vendors  was  that  ex¬ 
pected  sales  didn’t  materialize 
in  the  U.S.  in  June. 

For  example,  Mountain 
View,  Calif.-based  Veritas  said 


that  sales  of  its  storage  man¬ 
agement  software  met  expec¬ 
tations  in  most  of  Europe  and 
the  Asia-Pacific  region.  But 
the  sales  in  those  areas  were 
offset  by  a  late  drop-off  in  pur¬ 
chases  by  U.S.  customers.  “At 
the  end  of  the  June  quarter, 
our  anticipated  order  flow 
weakened,”  said  Veritas  CEO 
Gary  Bloom  in  a  statement. 

Houston-based  BMC  said 
it  signed  just  nine  software 
licensing  deals  worth  more 
than  $1  million  each  during 
the  quarter,  the  first  in  its  2005 
fiscal  year.  In  comparison, 


In  addition  to  the  warning  from 
Veritas,  storage  hardware  makers 
Emulex  Corp.  and  Overland  Stor¬ 
age  Inc.  have  said  they  will  miss 
their  second-quarter  revenue  tar¬ 
gets  -  a  development  that  has 
made  analysts  nervous  as  the 
largest  storage  vendors  prepare  to 
report  their  results  for  the  quarter. 

“We’re  all  anxiously  waiting  for 
the  storage  companies  to  report 
their  numbers,"  said  Gartner  Inc. 


BMC  inked  16  deals  that 
topped  the  $1  million  mark  in 
the  same  quarter  a  year  ago. 

Some  analysts  said  the 
widespread  dip  in  sales  is 
good  news  for  users  because  it 
should  increase  competition 
and  further  drive  down  soft¬ 
ware  prices.  Others  called  it 
an  indication  that  the  long- 
awaited  recovery  in  IT  spend¬ 
ing  is  already  sputtering. 

For  some  users,  the  recov¬ 
ery  hadn’t  even  begun. 

“I  haven’t  seen  any  increase 
in  spending  on  our  end,”  said 
Matt  Fuoco,  director  of  net¬ 
work  services  at  the  Universi¬ 
ty  of  Kansas  Medical  Center  in 
Kansas  City.  “People  are  ask¬ 
ing  more  questions  about  the 


analyst  Roger  Cox.  "This  quarter 
will  be  a  telling  quarter.  The 
weather  reports  don’t  give  you  all 
that  much  confidence.” 

Nitsan  Hargil,  an  analyst  at 
Arlington,  Va.-based  investment 
bank  Friedman,  Billings,  Ramsey 
Group  Inc.,  said  in  a  research  note 
that  Veritas  will  continue  to  face 
increased  competition  from  larger 
vendors  such  as  EMC  Corp., 
which  last  year  acquired  data 


spending  that’s  going  on.” 
Fuoco  added  that  there  is  still 
plenty  of  economic  uncertain¬ 
ty,  which  is  keeping  IT  spend¬ 
ing  flat  at  the  medical  facility. 

Jim  Prevo,  CIO  at  Green 
Mountain  Coffee  Roasters  Inc. 
in  Waterbury,  Vt,  said  many 
companies  could  still  be  di¬ 
gesting  software  purchases 
they  made  in  prior  years.  “Cer¬ 
tainly,  all  of  us  are  focused  on 
getting  more  out  of  what  we 


backup  and  recovery  software 
vendor  Legato  Systems  Inc. 

Dong  Jin  Kim,  senior  Unix  sys¬ 
tem  administrator  for  worldwide 
information  systems  at  Eastman 
Kodak  Co.  in  Rochester,  N.Y.,  runs 
backup  software  from  Veritas  on 
his  Sun  Solaris  servers. 

Kim  said  he  hasn’t  seen  any 
change  in  prices  from  Veritas.  But, 
he  added  that  he  has  been  getting 
increased  sales  pitches  from 
EMC’s  Legato  unit. 

“Certainly,  there’s  been  more 


have  already  paid  for,  rather 
than  writing  checks  for  new 
software,”  said  Prevo,  who 
runs  PeopleSoft’s  applications. 

“Companies  are  still  reluc¬ 
tant  to  make  major  software 
purchases,”  said  John  Moore, 
an  analyst  at  ARC  Advisory 
Group  Inc.  in  Dedham,  Mass. 
He  predicted  that  there  won’t 
be  any  big  uptick  in  sales  until 
after  the  November  election, 
at  the  earliest.  O  48066 


price  competition  in  a  lot  of  these 
[storage]  markets,”  said  Brian 
Babineau,  an  analyst  at  Enterprise 
Storage  Group  Inc.  in  Milford, 
Mass. 

But  Babineau  said  it’s  too  early 
to  tell  whether  the  storage  sales 
slump  is  industrywide  or  limited  to 
specific  companies. 

Emulex  and  Overland  Storage 
both  blamed  a  lack  of  reseller 
sales  for  their  shortfalls,  which 
they  disclosed  two  weeks  ago. 

-  Lucas  Mearian 


Storage  Sales  Telling  for  Industry 


MySQL,  SAP  Plot  Upgrade 
Of  Open-Source  Database 


MaxDB  to  get 
64-bit  capabilities 

BY  MARC  L.  SONGINI 

SAP  AG  and  development 
partner  MySQL  AB  are  ready¬ 
ing  an  upgrade  to  SAP’s  open- 
source  database  that  will  add 
support  for  64-bit  computing, 
along  with  new  monitoring 
and  management  features. 

SAP  inked  a  deal  with  open- 
source  database  vendor  My¬ 
SQL  in  May  2003  to  take  over 


much  of  the  development, 
support  and  marketing  of  the 
SAP  DB  software,  which  My¬ 
SQL  renamed  MaxDB. 

Zack  Urlocker,  vice  presi¬ 
dent  of  marketing  at  Uppsala, 
Sweden-based  MySQL,  last 
week  said  the  two  companies 
are  working  on  a  MaxDB  7.6 
upgrade  that’s  due  by  year’s 
end. 

The  new  version  will  run  on 
additional  operating  systems, 
including  64-bit  Linux  and 
HP-UX,  and  support  the  Java- 


based  Eclipse  development 
framework,  he  said.  It  will  also 
include  support  for  MySQL 
Proxy,  a  stand-alone  program 
that  lets  MySQL’s  namesake 
software  share  information 
with  other  databases. 

User  Appeal 

The  performance  boost  that 
should  come  with  64-bit  sup¬ 
port  is  of  interest  to  Charlie 
Brann,  SAP  administrator  at 
Swisslog  TransLogic  Corp.,  as 
are  the  automated  monitoring 
and  management  features. 

Denver-based  Swisslog  uses 
SAP  DB  7.3  to  support  its  R/3 
ERP  system  and  other  applica¬ 
tions.  Brann  said  the  maker  of 


materials-handling  systems  is 
considering  an  upgrade  to 
SAP’s  mySAP  ERP  software 
and  a  migration  to  MaxDB  7.6. 

MaxDB  is  currently  used 
in  about  6,000  installations, 
Urlocker  said.  MySQL  and 


MaxDB 


■  Originally  developed  by 
SAP  as  a  free  alternative  to 
commercial  databases  for 
users  of  its  applications. 

■  Released  in  an  open- 
source  version  by  SAP  in 
2000,  then  renamed  and 
offered  under  a  commercial 
license  by  MySQL  last  fall. 


SAP  announced  a  commercial 
version  last  November  as  an 
alternative  to  the  free  release 
that  SAP  includes  with  its 
business  applications.  Pricing 
starts  at  $49  per  named  user 
on  single-CPU  systems. 

Charles  Garry,  an  analyst 
at  Meta  Group  Inc.,  said  he 
doesn’t  see  MaxDB  at  user 
sites  very  often,  but  he  fre¬ 
quently  discusses  the  technol¬ 
ogy  with  his  clients. 

IT  managers  at  many  large 
companies  are  reluctant  to  de¬ 
ploy  the  database  because 
they  think  it’s  more  appropri¬ 
ate  for  midsize  users  looking 
to  cut  costs,  Garry  said. 

O  48080 


I 


£ 


tr  i. 


COMPANIES  THAT  PUT  VOICE  ON  THE 
NETWORK  CHOOSE  THE  COMPANY 
THAT  BUILT  THE  NETWORK. 

When  voice  joins  data  on  a  secure  network,  some  remarkable  things  can  happen.  Instead  of  managing  different  flavors  of  PBX  from  location  to  location,  you 
can  handle  everything  from  one  place,  saving  time  and  money — not  to  mention  mileage  on  IT  staff  shoes.  And  with  over  20  years  of  proven  networking 
experience,  Cisco  has  become  the  standard  for  millions  of  voice  IP  users  around  the  world.  It's  why  over  half  of  the  Global  500  have  chosen  Cisco  to  rethink 
the  way  they  handle  voice.  And  their  business.  Are  you  in  yet?  To  learn  how  Cisco  can  help  you  plan,  design  and  implement  an  end-to-end  IP  solution,  visit 

cisco.com/go/ipcnow.  NOW,  OVER  THREE  MILLION  PEOPLE  ARE  USING  CISCO  IP  PHONES. 
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Sun  Exec  Discusses  Plans 
For  Open-Source  Solaris 

No  decisions  yet  about  licensing  model 


BY  CAROL  SLIWA 

SAN  FRANCISCO 


SUN  MICROSYSTEMS  INC. 
will  make  its  Solaris 
operating  system  avail¬ 
able  under  an  open- 
source  model  by  the  end  of  the 
year,  according  to  John 
Loiacono,  the  company’s 
executive  vice  presi¬ 
dent  of  software. 

Loiacono  said  no  de¬ 
cision  has  been  made 
about  the  open-source 
licensing  model,  but  he 
discussed  the  philoso¬ 
phy  behind  the  move  to 
open-source  during  an 
interview  at  the  company’s  re¬ 
cent  JavaOne  conference  here. 
Excerpts  follow: 


there’s  more  people  finding  So¬ 
laris  and  being  more  able  to  use 
and  modify  and  actually  devel¬ 
op  on  top  of  Solaris.  And  that 
isn’t  just  about  the  [people] 
that  we  sell  to.  It’s  about  creat¬ 
ing  the  community  of  tens  of 
thousands  or  hundreds 
of  thousands  of  people 
who  want  to  innovate 
on  top  of  the  code  we 
give  them  access  to. 


Why  is  Sun  going  to  make  Solaris 
available  under  an  open-source 
model?  If  you  talk  to  CIOs 
about  something  like  Solaris, 
you  know  what  they  say  to  me? 
“Why  would  you  do  that?  It 
makes  no  sense  to  me.”  They 
say,  “I  want  mission-critical, 
reliable,  redundant,  available, 
secure.  That’s  what  Solaris 
brings  to  me.  I  want  that  to 
continue.  Open-source  means 
very  little  to  me.” 

Conversely,  you  go  talk  to 
the  developers  in  that  corpora¬ 
tion,  and  they  say,  “Oh,  this 
would  be  great.  I  can  write  dri¬ 
vers.  I  can  do  innovation.” 

So  there’s  a  sense  of  creat¬ 
ing  the  community.  This  is 
about  how  I  get  more  people 
developing  software  on  the 
platform,  because  at  the  end  of 
the  day,  it’s  all  about  applica¬ 
tions.  It’s  not  about  the  OS  it¬ 
self.  People  like  Windows  be¬ 
cause  there’s  a  lot  of  applica¬ 
tions  running  on  it.  People  are 
liking  Mac  more  because 
there’s  a  lot  of  applications  on 
it.  They  like  Linux  because 
there’s  a  growing  number  of 
applications  on  it. 

The  reason  we’re  doing  this 
on  the  whole  is  we’re  trying  to 
create  relevance  in  the  fact  that 


Will  moving  to  open-source 
allow  Sun  to  decrease  its 
Solaris  development  staff? 

There’s  not  going  to  be 
a  huge  decrease.  The 
CIOs  say,  “My  biggest  worry 
about  open-source  is  all  the 
problems  that  things  like  Linux 
give  me.  What  I  want  is  your 
QA  tests  and  all  the  rigidity 
you  put  behind  a  Solaris  re¬ 


lease.”  And  my  point  to  them 
is,  absolutely.  What  we’ll  do  to¬ 
morrow  —  whether  it’s  open- 
source,  or  no  matter  what  li¬ 
censing  model  it  is  —  you  will 
get  Solaris  with  all  its  QA,  its 
tests,  its  hardening,  all  its  secu¬ 
rity  that  you  have  today.  All 
those  resources  required  to  do 
that,  we  will  maintain. 

In  addition  to  innovation  for 
things  like  container  technol¬ 
ogy  or  fault  recovery  or  dy¬ 
namic  tracing  that  I’m  adding 
as  new  features  in  Solaris,  I  an¬ 
ticipate  now  that  I’ll  have  tens 
of  thousands  of  people  saying, 
“Here’s  an  innovation  on  top 
of  that.”  So  could  I  get  even 
more  features  built  in,  or  could 
I  over  time  reduce  my  cost  of 
production?  Yeah,  absolutely 
—  as  long  as  I’m  doing  the  QA 
and  test  cycle  on  what  I  call 
Solaris  versus  the  open  ver¬ 
sion  of  Solaris,  which  is  proba¬ 


bly  called  something  slightly 
different,  just  to  make  sure 
people  understand  there  are 
differences  between  the  two. 


Will  there  be  two  versions  of  So¬ 
laris?  No.  We  will  release  the 
same  version.  But  one  will  be 
open-source,  no  support.  And 
one  will  be  the  one  that  we 
ship  to  Merrill  Lynch. 


Are  you  leaning  toward  a  specific 
open-source  licensing  model 
at  this  point?  We  have  some 
internal  debates  on  what  we 
think  will  be  the  most  optimal. 
There  are  several  to  pick  from. 
There  isn’t  one  hammer  for 
every  nail. 


Is  it  possible  you’ll  take  an  ap¬ 
proach  similar  to  what  IBM  did 
with  Eclipse?  Possible.  You 
should  also  look  at  what  Red 
Hat  has  done  with  Linux. 


Any  other  models  look  appealing? 

I’ve  got  to  be  careful,  because 
they  do  bring  different  things 
to  the  table.  You  have  things 
like  the  Apache  model,  which 
gives  you  some  of  the  brand¬ 


ing  rights.  You  have  MySQL, 
which  has  some  of  the  brand¬ 
ing  rights.  You  have  the  Mozil- 
la  license,  which  is  a  very  pop¬ 
ular  license  model.  You  have 
the  CPL  [Common  Public  Li¬ 
cense],  which  gives  you  some 
flexibility  in  different  areas. 
And  you  obviously  have  GPL 
[General  Public  License]  and 
LGPL  [Lesser  GPL].  Then  we 
even  have  our  Sun  public  li¬ 
cense,  something  we  call  the 
SISL,  the  Sun  Industry  Stan¬ 
dard  License. 


When  will  you  make  a  decision 
about  the  licensing  model?  Short¬ 
ly.  I  hate  to  be  so  vague,  but  by 
the  end  of  the  year,  we’ll  have 
the  whole  thing  announced. 


Solaris  is  going  open-source.  Why 
not  Java?  We  see  ourselves  as 
being  the  stewards  of  Java. 
Compatibility  is  a  key  issue. 

©  48079 
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The  full  interview  with  John  Loiacono  is 
available  on  our  Web  site: 
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Microsoft  Partners  Get 
New  Support  Options 


BY  CAROL  SLIWA 

Users  turning  to  Microsoft 
Corp.’s  ample  stable  of  chan¬ 
nel  partners  for  products,  sup¬ 
port  or  consulting  services  are 
getting  a  new  point  of  differ¬ 
entiation  to  help  them  make 
decisions  about  which  ven¬ 
dors  to  select. 

At  its  Worldwide  Partner 
Conference  in  Toronto  yester¬ 
day,  Microsoft  launched  its 
Services  Partner  Advantage 
program  to  provide  additional 
resources  and  support  options 
to  independent  software  ven¬ 
dors,  systems  integrators  and 
other  partners. 

A  standard  prepackaged  op¬ 
tion  gives  a  partner  phone- 
based  problem  resolution  sup¬ 
port  and  various  online  re¬ 
sources.  The  higher-priced 
“plus”  plan  can  be  customized 
by  the  partner  and  adds  a  des¬ 
ignated  service  professional  at 


Microsoft  as  a  resource.  There 
is  also  a  third  plan,  based  on 
the  standard  and  plus  offer¬ 
ings,  that  applies  to  Microsoft 
Business  Solutions  products. 

“We  want  to  try  to  drive 
better  credibility  for  the  part¬ 
ner  community  so  they  be¬ 
come  more  of  an  asset  for 
their  end  customers,”  said 
Thomas  Dawkins,  a  product 
manager  for  worldwide  ser¬ 
vices  at  Microsoft.  His  prior 
experience  includes  running  a 
consulting  practice  and  work¬ 


ing  at  an  independent  soft¬ 
ware  vendor.  “I  know  how  im¬ 
portant  it  is  to  show  credibili¬ 
ty  to  a  new  customer,”  he  said. 

Partners  in  the  past  had  to 
pay  at  least  $40,000  to  $50,000 
to  get  premier  support  with 
Microsoft.  They  will  now  find 
an  entry-level  option  for  the 
standard  plan  starting  at  $5,000 
to  $8,000;  the  entry  price  point 
for  the  plus  plan  ranges  from 
$27,000  to  $32,000,  a  Microsoft 
spokeswoman  said.  The  less 
expensive  options  are  expected 
to  enable  an  increasing  number 
of  Microsoft’s  partners  to  ac¬ 
cess  more  consistent  support. 

“It  could  be  a  selling  point 
for  partners.  They  might  say, 
‘We  can  support  your  system 


Microsoft’s  New  Services  Plans 


■  Services  Partner  Advantage  Standard  Plan:  Prepackaged  option  co¬ 
ordinated  by  a  team  of  phone-based  service  representatives.  Offers  online 
resources,  problem  resolution  support  and  proactive  services. 


■  Services  Partner  Advantage  Plus  Plan:  Customizable  option  managed  by 
a  designated  service  representative.  Includes  consulting  services,  workshops, 
problem  resolution  support,  service  delivery  planning  and  online  resources. 


better  because  we  have  a  dedi¬ 
cated  support  resource  at  Mi¬ 
crosoft,’  ”  said  Paul  DeGroot, 
an  analyst  at  Directions  on 
Microsoft  in  Kirkland,  Wash. 
Corporate  users  looking  at 
competitive  offerings  from 
various  partners  might  now 
ask  what  kind  of  support  con¬ 
tract  the  partner  has  with  Mi¬ 
crosoft,  he  said. 

The  Partner  Advantage  pro¬ 
gram  is  available  to  Microsoft’s 
Registered,  Certified  and  Gold 
Certified  partners.  It  is  intend¬ 
ed  to  help  address  partner 
complaints  about  contract 
terms,  limited  service  options 
and  the  lack  of  consistency  in 
the  naming  of  programs  on  a 
global  basis,  Dawkins  said. 

“It  arms  the  systems  inte¬ 
grators  and  ISVs  with  services 
they  perhaps  did  not  have  be¬ 
fore  or  didn’t  have  enough  of 
to  support  their  customers  ap¬ 
propriately,”  said  Paul  Ed¬ 
wards,  a  Toronto-based  ana¬ 
lyst  at  IDC.  “If  partners  can 
get  access  to  the  people  they 
need  [at  Microsoft],  the  cus¬ 
tomers  will  benefit.”  ©  48082 
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Consider  the  dots  connected.  The  end-to-end  voice  over  IP  solution  we  designed 
for  Crate  and  Barrel  features  a  unified  IP  messaging  platform  and  the  most  advanced 
hardware  available.  The  new  system  will  save  them  a  bundle  on  maintenance,  management 
and  wiring,  while  easing  the  cost  and  complexity  of  adding  features  or  employees.  And 
it’s  already  improving  productivity,  helping  over  400  associates  make  millions  of  customers 
feel  right  at  home.  To  find  out  more,  go  to  sbc.com/dots.  GOING  BEYOND  THE  CALL." 


SBC,  the  SBC  lego  aid  GQiNG  BEYOND  THE  CALL  are  registered  trademarks  of  SBC:  Knowledge  Ventures,  l.P  and/or  its  affiliates.  ®  2004  SBC  Knowledge  ventures.  L.P.  AH  rights  reserve:. 
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Microsoft  Looks  to 
Cut  Costs  by  $1B 

Microsoft  Corp.  plans  to  lower  ex¬ 
penses  by  nearly  $1  billion  in  its 
2005  fiscal  year,  CEO  Steve 
Ballmer  wrote  in  an  e-mail  mes¬ 
sage  to  employees.  Microsoft’s 
costs  have  grown  faster  than  its 
revenue  over  the  past  three  years, 
according  to  Ballmer.  “This  is  ob¬ 
viously  not  a  trend  we  can  contin¬ 
ue,”  he  said,  adding  that  Micro¬ 
soft  executives  “want  to  be  pru¬ 
dent  now  so  we  avoid  severe 
measures  later.”  The  company’s 
new  fiscal  year  began  July  1. 


Patent  Ruling  Goes 
Against  Microsoft 

The  U.S.  Court  of  Appeals  in 
Washington  reversed  a  lower- 
court  ruling  in  Microsoft’s  favor 
as  part  of  a  patent  infringement 
lawsuit  filed  in  1998  by  Encinitas, 
Calif.-based  TypeRight  Keyboard 
Corp.  The  court  said  a  decision  in¬ 
validating  two  keyboard  patents 
held  by  TypeRight  was  “improper” 
and  sent  the  case  back  to  the 
U.S.  District  Court  in  San  Diego. 
Microsoft  repeated  its  claim  that 
no  infringement  took  place. 


Symbian  Receives 
$93M  for  OS  Work 

The  six  hardware  vendors  that 
continue  to  own  stakes  in  Sym¬ 
bian  Ltd.  pledged  $93  million  in 
funding  to  accelerate  develop¬ 
ment  of  the  London-based  com¬ 
pany's  mobile  operating  system, 
which  competes  with  software 
from  Microsoft  and  PalmSource 
Inc.  The  infusion  was  part  of  a 
deal  in  which  Psion  PLC  sold  off 
its  31%  stake  in  Symbian. 


Short  Takes 

CISCO  SYSTEMS  INC.  said  it  will 
pay  $9  million  to  buy  Parc  Tech¬ 
nologies  Ltd.,  a  London-based  de¬ 
veloper  of  network  routing  soft¬ 
ware.  . . .  ANTIVIRUS  SOFTWARE 
VENDORS  warned  about  two  new 
variants  of  the  Bagle  e-mail  worm 
that  deposit  copies  of  their  source 
code  on  infected  computers. 


BearingPoint  Move 
Raises  China’s  Profile 

But  country  still  lags  far  behind  India 
as  offshore  outsourcing  destination 


BY  PATRICK  THIBODEAU 

EARINGPOINT  INC. 
has  opened  its  second 
development  facility 
in  China,  a  move  ana¬ 
lysts  see  as  part  of  a  trend  by 
U.S.  firms  to  expand  such  op¬ 
erations  in  that  country. 

The  McLean,  Va.-based  con¬ 
sulting  firm  said  last  week  that 
it  opened  the  56,300-square- 
foot  development  center  in 
the  northeastern  industrial 
city  of  Dalian.  The  facility  cur¬ 
rently  has  60  employees,  but 
BearingPoint  hopes  to  have 
1,000  people  working  there  “as 
quickly  as  possible,”  said  Craig 
Franklin,  an  executive  vice 
president  at  BearingPoint  and 
head  of  its  Global  Technology 
Services  arm. 

BearingPoint,  which  has 
15,500  employees  worldwide, 
also  runs  a  development  facili¬ 
ty  in  Shanghai  with  400  em¬ 
ployees.  It  has  a  center  in 
Chennai,  India,  with  100  peo¬ 
ple,  which  it  plans  to  expand 
to  1,000  workers  during  the 
next  year.  The  company  also 
operates  a  development  cen¬ 
ter  in  Spain. 

Growing  Interest 

BearingPoint  isn’t  the  only 
multinational  firm  that’s  inter¬ 
ested  in  China,  but  the  coun¬ 
try  remains  well  behind  India 
as  a  provider  of  development 
services,  said  Eugene  Kubla- 
nov,  an  analyst  at  NeoIT,  an 
outsourcing  consulting  firm  in 
San  Ramon,  Calif. 

In  2003,  India  had  IT  ser¬ 
vices  exports  of  about  $9.5  bil¬ 
lion,  compared  with  about 
$700  million  for  China,  said 
Kublanov.  Most  of  China’s  ex¬ 
port  work  is  for  the  Korean 
and  Japanese  markets,  he  said. 

According  to  Michael  Ye, 
general  manager  of  business 
operations  at  Dalian  Software 
Park  Co.,  other  IT  firms  with 
offshore  operations  in  Dalian 


include  Accenture  Ltd.,  SAP 
AG,  Hewlett-Packard  Co.,  IBM 
Global  Services  and  GE  Capi¬ 
tal  Corp. 

Wu  Jiazhi  is  a  China-based 
programmer  who  works  for 
TopCoder  Inc.,  a  Glastonbury, 
Conn.-based  firm  that  con¬ 
ducts  online  competitions  for 
recruiting  programming  talent 
for  outsourcing  projects.  Wu 
said  he  believes  China’s  work¬ 
ers  have  the  technical  skills 
that  will  enable  the  country  to 
rival  or  exceed  India  within 
several  years.  China  lags  not  in 
technical  skills  but  in  develop¬ 
ment  standards,  he  said.  “Most 
Chinese  firms  are  providing 
application  solutions  with  rel¬ 
atively  poor  extensibility  and 
documentation,”  he  said. 

Kublanov  cited  project  man¬ 
agement  as  a  problem  for  Chi- 


BY  PATRICK  THIBODEAU 

British  Broadcasting  Corp.  has 
picked  Siemens  Business  Ser¬ 
vices  Ltd.  to  take  over  its  tech¬ 
nology  arm  in  a  $3.7  billion 
deal  that’s  one  of  the  largest 
outsourcing  pacts  signed 
this  year. 

The  10-year  agreement, 
the  result  of  a  contracting 
process  that  took  only  about 
six  months,  calls  for  the 
BBC  to  sell  its  wholly 
owned  commercial 
subsidiary,  BBC 
Technology  Holdings 
Ltd.,  to  Siemens.  BBC 
Technology  employs 
about  1,400  workers. 

John  Varney,  the 
BBC’s  chief  technol¬ 
ogy  officer,  said  Sie¬ 
mens  was  chosen  be¬ 
cause  the  company 
“understood  our 


na  as  well.  However,  Bearing- 
Point’s  Franklin  said  he  be¬ 
lieves  his  company  has  the 
necessary  resources  in  place, 
including  bilingual  workers 
based  in  the  U.S.,  to  ensure 
good  project  management  and 
clear  communication. 

Sierra  Atlantic  Inc.,  a  Fre¬ 
mont,  Calif.-based  outsourcing 
firm  that  specializes  in  re¬ 
search  and  development,  has  a 


technology  vision  [and]  where 
we  need  to  get  to.” 

Most  important,  “it  was  a 
very,  very  strong  cultural  fit,” 
said  Varney,  who  noted  that 
the  Berkshire,  England-based 
Siemens  unit  got  the  nod  in 
part  because  of  its  willingness 
to  be  flexible.  “They  under¬ 
stand  the  nature  of  this  con¬ 
tract,  in  that  it  will  need  to  be 
very  dynamic  —  it  will  need  to 
evolve  over  the  next 
10  years.” 

Moreover,  Siemens 
is  “prepared  to  travel 
with  us  as  we  move 
toward  a  different 
world  of  broadcast¬ 
ing,”  Varney  said. 
“The  basis  of  our 
transformation  is  to 
use  Internet  tech¬ 
nologies  to  bring 
program-making 


development  center  in  India. 
But  it’s  eyeing  China  as  a  fu¬ 
ture  development  site  because 
the  country  “has  the  best  com¬ 
bination  of  cost  advantage  and 
supply  of  strong  engineers,” 
said  Marc  Hebert,  a  vice  presi¬ 
dent.  Market  access  is  also  a 
key  factor  in  opening  a  devel¬ 
opment  center  in  China, 
Hebert  said. 

Although  labor  costs  in  In¬ 
dia  are  rising,  Hebert  said  he 
sees  nothing  threatening  that 
country’s  dominance  as  an  off¬ 
shore  development  center.  Im¬ 
pediments  to  doing  business 
in  China  include  government 
bureaucracy  and  the  language 
barrier,  he  noted.  ©  48083 


to  every  desktop.” 

The  BBC  began  its  selection 
process  in  December  with  an 
advertisement  for  bidders.  It 
compiled  a  list  of  31  vendors 
and  quickly  reduced  that  to 
nine  and  then  three:  Siemens, 
Accenture  Ltd.  and  Computer 
Sciences  Corp.,  which 
dropped  out  of  the  running. 

Varney  said  it’s  possible 
to  put  together  a  complex 
outsourcing  deal  rapidly  if 
enough  people  are  assigned 
to  it.  The  BBC  assembled  a 
team  of  about  70  people  who 
conducted  “1,000  man-days 
of  negotiations”  over  a  four- 
week  period,  he  said. 

The  BBC  used  a  combination 
of  objective  measures  and  sub¬ 
jective  assessments  in  reaching 
its  decision,  Varney  said.  In  a 
previous  interview  [QuickLink 
47040],  he  said  it  was  impor¬ 
tant  that  teams  from  the  BBC 
and  the  vendor  be  able  to  work 
well  together  —  something  he 
said  has  been  accomplished 
with  Siemens.  ©  48081 


BBC  Awards  Siemens 
$3.7B  Outsourcing  Pact 


Ml 

JOHN  VARNEY  says 
Siemens  under¬ 
stands  the  BBC's 
“technology  vision.” 


Profiles  in  Business  Mobility  #Z  Versatility 


Why  carry  two  devices  when  you  can 

carry  just  one? 


I L  If  your  employees  are  often  out  of  the  office  serving  customers,  yet 
n  *  they  always  need  to  stay  connected,  the  Nokia  5820  Messaging 
1^  Device  is  the  right  call.  A  full  messaging  keypad  makes  email  fast 
and  easy.  A  color  screen  enhances  readability.  And  because  Nokia  business 
mobility  offerings  go  beyond  phones  to  enable  sophisticated  back-end 
secure  mobile  connectivity,  you  can  give  your  workforce  g-.!MPWey 


Nokia  security  appliance 


the  advantage  of  mobile  access  to  critical  data  such  as  sales  numbers, 
inventory  levels,  financials,  and  more.  When  you  think  about  it,  with  the 

lg  Device  and  business  mobility  solutions,  who 
mail,  voice,  data— even  calendar  and  contacts— 
here  your  people  need  them:  at  their  fingertips. 


Learn  how  to  mobilize  your  team  and 
increase  business  productivity.  Download 
“The  Anytime,  Anyplace  World”  white  paper. 

nokiaforbusiness.com 
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Court  Upholds  Calif.  E-voting  Ban 


Advocates  for  the 
disabled  claimed  it 
was  discriminatory 

BY  DAN  VERTON 

A  FEDERAL  JUDGE  last 
week  upheld  a  Cali¬ 
fornia  directive  that 
decertified  touch¬ 
screen  voting  machines  and 
withheld  future  certification 
until  vendors  of  those  systems 
can  meet  specific  security 
requirements. 

The  decision  arose  from  a 
lawsuit,  Benavidez  v.  Shelley, 
brought  by  disability  rights 
advocates  and  four  California 
counties  that  oppose  Califor¬ 
nia  Secretary  of  State  Kevin 
Shelley’s  requirement  for 
voter-verifiable  paper  audit 
trails.  The  counties  also  op¬ 
pose  Shelley’s  order  to  decerti¬ 
fy  direct-recording  equipment 


(DRE)  voting  systems. 

The  plaintiffs  argued  that 
banning  the  systems  would 
disenfranchise  visually  or 
physically  impaired  voters. 

In  an  order  issued  by  the 
U.S.  District  Court  for  the 
Central  District  of  California, 
Judge  Florence-Marie  Cooper 

The  evidence 
does  not  sup¬ 
port  the  conclusion 
that  the  elimination 
of  [e-voting  ma¬ 
chines]  would  have  a 
discriminatory  effect 
on  the  visually  or 
manually  impaired. 

U.S.  DISTRICT  COURT  JUDGE 

FLORENCE-MARIE  COOPER 


wrote  that  “the  evidence  does 
not  support  the  conclusion 
that  the  elimination  of  the 
DREs  would  have  a  discrimi¬ 
natory  effect  on  the  visually  or 
manually  impaired.” 

Cooper  also  said  that  the 
secretary  of  state’s  “decision 
to  suspend  the  use  of  DREs 
pending  improvement  in  their 
reliability  is  certainly  a  ratio¬ 
nal  one,  designed  to  protect 
the  voting  rights  of  the  state’s 
citizens.”  Cooper  noted  that 
Shelley  is  responsible  for  en¬ 
suring  that  votes  are  counted 
accurately,  and  requiring  a  pa¬ 
per  audit  trail  is  one  way  of 
fulfilling  that  obligation. 

Cindy  Cohn,  legal  director 
for  the  Electronic  Frontier 
Foundation,  called  the  court’s 
decision  a  “landmark”  ruling. 

“The  court  said  in  clear,  un¬ 
ambiguous  terms  that  requir¬ 
ing  a  paper  trail  for  e-voting 


GAO  Says  IT  Mismanagement 
At  Pentagon  Wastes  Billions 


BY  DAN  VERTON 

Despite  years  of  moderniza¬ 
tion  efforts  that  have  cost  tax¬ 
payers  billions  of  dollars, 
thousands  of  IT  systems  at  the 
Pentagon  remain  “fundamen¬ 
tally  flawed”  and  have  led  to 
logistics  and  pay  problems  for 
forces  serving  in  Iraq,  accord¬ 
ing  to  a  new  report  by  the  U.S. 
General  Accounting  Office. 

The  problems,  primarily  a 
lack  of  management  oversight 
and  investment  control,  stem 
from  “long-standing”  chal¬ 
lenges  to  the  Pentagon’s  busi¬ 
ness  modernization  efforts, 
GAO  auditors  told  members 
of  Congress  last  week. 

For  example,  more  than  200 
inventory  control  systems  at 
the  Department  of  Defense 
still  aren’t  integrated,  offering 
little  or  no  visibility  into  the 
Pentagon’s  $1.1  trillion  in  as¬ 
sets,  according  to  the  GAO.  In 
addition,  the  Pentagon  has  no 
standard  process  for  identify¬ 
ing  critical  business  systems, 
nor  does  it  even  have  a  stan¬ 
dard  definition  of  what  consti¬ 


tutes  a  business  system. 

“These  problems  have  left 
the  department  vulnerable  to 
billions  of  dollars  of  fraud, 
waste  and  abuse  annually,  at  a 
time  of  increasing  fiscal  con¬ 
straint,”  GAO  auditors  told 
Congress. 

The  Defense  Department’s 
IT  management  blunders  have 
also  adversely  affected  U.S. 
military  units  and  service 
members,  including  those 
fighting  in  Afghanistan  and 
Iraq,  according  to  the  GAO. 

The  lack  of  IT  management 
at  the  Pentagon  has  caused  mil¬ 
itary  personnel  to  experience 
“substantial  logistical  support 
problems”  in  Iraq, 
the  GAO  concluded. 

In  a  written  re¬ 
sponse  to  the  GAO’s 
findings,  David 
Norquist,  acting 
comptroller  at  the 
Pentagon,  cited  the 
continuing  develop¬ 
ment  of  a  business 
enterprise  arch¬ 
itecture  and  a  busi- 


EVANS:  Leaders 
are  “committed  to 
transforming  the 
[DOD's]  business 
operations.” 


machines  is  consistent  with  the 
obligation  to  assure  the  accura¬ 
cy  of  election  results,”  Cohn 
said.  “That’s  an  enormous  vic¬ 
tory  for  secure  elections.” 

The  plaintiffs  in  the  case  did 
not  respond  to  calls  seeking 
comment. 

State  and  local  elections  of¬ 
ficials  around  the  country  are 
scrambling  to  ensure  that 
e-voting  systems  in  different 


jurisdictions  are  reliable  and 
can  be  secured  from  tamper¬ 
ing  in  time  for  the  November 
election. 

The  decision  follows  the  re¬ 
lease  of  a  report  two  weeks 
ago  by  an  IT  security  panel 
that  outlined  a  strategy  for 
certifying  the  security  and  re¬ 
liability  of  touch-screen  DRE 
voting  systems  [QuickLink 
47931].  The  systems  will  be 
used  in  jurisdictions  repre¬ 
senting  about  30%  of  regis¬ 
tered  voters  in  the  upcoming 
presidential  election.  ©  48085 


ness  IT  investment  governance 
structure  that  he  said  should 
begin  to  reap  benefits  during 
the  fiscal  2006  budget  cycle. 

John  Gilligan,  CIO  of  the  Air 
Force,  said  the  GAO  report 
tells  only  part  of  the  story.  Ac¬ 
cording  to  Gilligan,  the  $19  bil¬ 
lion  that  the  DOD  requested 
for  modernizing  its  business 
systems,  as  cited  in  the  GAO 
report,  also  covered  infra¬ 
structure  costs  such  as  classi¬ 
fied  and  unclassified  networks 
and  computing  centers  in  both 
U.S.  and  overseas  locations. 

Gilligan  said  the  branches  of 
the  military  have  made  sub¬ 
stantial  progress  in  consoli¬ 
dating  and  modernizing  their 
business  systems,  “on  a  scale 
larger  than  all  but  a  few  of  the 
Fortune  500  companies.” 

Karen  Evans,  the 
White  House’s  di¬ 
rector  of  e-govern¬ 
ment,  said  the 
DOD’s  leadership 
“supports  the  presi¬ 
dent’s  management 
agenda  and  is  com¬ 
mitted  to  transform¬ 
ing  the  department’s 
business  opera¬ 
tions.”  ©  48084 


NEW  PRODUCT 


Siemens  Adds  to  Unified 
Communications  Software 


HiPath  OpenScape 
Version  2.0 

Siemens  Information  and 
Communication  Networks  Inc. 

■  PRODUCT  SUMMARY:  The 

Boca  Raton,  Fla.-based  sub¬ 
sidiary  of  Siemens  A6  today  plans 
to  announce  an  upgrade  of  its 
presence-aware  communications 
and  collaboration  software,  which 
includes  buddy-list  capabilities 
and  provides  consolidated  access 
to  voice,  e-mail,  instant  messag¬ 
ing  and  conferencing  services. 
Version  2.0  adds  a  Web  services 
tool  kit  for  developing  real-time 
communications  applications 
based  on  open  standards  such  as 
the  Session  Initiation  Protocol. 

Siemens  said  the  new  release 
also  can  notify  end  users  when 
someone  they  need  to  contact  be¬ 
comes  available.  Other  new  fea¬ 
tures  include  a  text-based  user  in¬ 
terface,  support  for  natural  speech 
recognition  and  a  rules  wizard  for 
setting  automated  changes  in 
presence  status  or  communica¬ 
tions  device  preferences. 

■  USER  EXPERIENCE:  America- 
Mideast  Educational  and  Training 
Services  Inc.,  a  Washington- 
based  company  that  operates  ed¬ 
ucational  exchanges  between 
countries  and  provides  language 
training,  is  using  Version  1.0  of 
OpenScape  and  will  upgrade  to 
the  new  release  in  the  fall.  Ugur 
Usumi,  director  of  IT  at  America- 
Mideast,  said  he  wants  to  take  ad¬ 
vantage  of  new  features  such  as 
the  ability  for  end  users  to  set 


their  contact  preferences  via  a 
phone  call. 

America-Mideast  has  250 
OpenScape  users  in  offices  worid- 
wide,  and  Usumi  said  one  of  the 
big  benefits  of  Version  1.0  is  that 
someone  setting  up  a  conference 
call  can  quickly  contact  other 
workers  instead  of  waiting  for 
them  to  call  in.  "It’s  a  scheduling 
device,  in  a  sense,”  he  said.  “I  just 
figure  out  the  people  I  need  to  call” 

■  ANALYST  ASSESSMENT:  Ver¬ 
sion  1  of  OpenScape  is  presence- 
aware  and  supports  real-time  col¬ 
laboration,  but  users  should  see 
increased  capabilities  in  Version 
2.0,  said  Gartner  Inc.  analyst  Jeff 
Snyder.  “This  version  brings  us 
closer  to  unified  communications, 
especially  as  companies  replace 
traditional  voice  switches  with  IP 
telephony,”  Snyder  said.  He 
added  that  Siemens  has  an  ad¬ 
vantage  over  its  rivals  because 
OpenScape  can  work  with  any 
telephony  switch. 

■  OTHER  VENDORS  IN  MAR¬ 
KET:  Mitel  Networks  Corp.  and 
Nortel  Networks  Ltd.;  Snyder  pre¬ 
dicted  that  Cisco  Systems  Inc. 
eventually  will  enter  the  market. 

■  PRICE:  OpenScape  2.0  sells 
for  $125  per  user  for  basic  pres¬ 
ence  capabilities.  Collaboration 
support  costs  another  $125  per 
user;  a  voice  portal  can  be  added 
for  $100  per  user. 

■  AVAILABILITY:  Version  2.0  is 
due  in  eariy  August.  ©  48057 

-Matt  Hamblen 


HP  Integrity  servers  are  taking  off,  as  are  the  companies  using  them 


Companies  adopting  HP  Integrity  servers,  powered  by  industry-leading  Intel®  Itanium®  2  processors,  are  seeing  remarkable 

gains  in  performance.  The  momentum  is  building.  One  after  another,  companies  are  choosing  HP  Integrity  servers.  Leading  software  and  technology  partners  such  as  BEA, 
Microsoft®  Oracle,  SAP  and  Siebel  Systems  have  embraced  the  platform  as  an  industry  standard.  And  with  the  ability  to  manage  a  mixed  environment  of  UNIX,  Microsoft'  Windows® 
Linux  and  OpenVMS,  HP  Integrity  servers  are  fast  becoming  the  ultimate  consolidation  tool.  Demand  maximum  performance,  reliability  and  cost-efficiency  now,  on  a  platform  that 
will  carry  you  forward  into  the  future.  Demand  performance  that's  real-world  proven,  and  get  it— with  HP  Integrity  server  solutions. 


Choosing  HP  Integrity  servers,  choosing  results. 


AIRBUS  UK: 

Running  HP-UXIli 
on  HP  Integrity  servers, 
20-30  wing  design 
simulations  that  used 
to  take  weeks  are 
now  done  overnight. 


COMPUSA: 

Going  with  64-bit 
architecture  using  HP 
Integrity  servers,  they 
cut  access  time  to 
inventory  data  by  up 
to  85%. 


FIAT  AUTO: 
Standardizing  on  64-bit 
infrastructure  using  HP 
Integrity  servers,  they're 
integrating  and  enhancing 
sales  and  service  as  well 
as  streamlining  the  buying 
process  while  lowering 
sales  cost. 


THE  KOEHLER  GROUP: 

Moving  to  an  environment 
composed  of  HP  Integrity 
servers,  they  gained 
a  50%  improvement  in 
mission-critical  performance. 


invent 


To  get  the  IDC  white  pope  outlining  the  performance  of  HP  Integrity  servers  with  Intel  Itanium  2 
processors,  go  to  hp.com/go/demandlntegrity5  or  call  1-800-282-6672,  option  5,  mention  code  AQHF. 


Intel,  Intel  Inside,  the  Intel  Inside  Logo  and  Itanium  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  U.S.  and  other  countries.  Microsoft  and  Windows  are  either  registered  trademarks  or  trademarks  of  Microsoft 
Corporation.  ©2004  Hewlett-Packard  Development  Company,  L.P. 
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Bracing  for  Backlash 


ONE  DAY,  the  political  windstorm  around 
offshore  outsourcing  will  blow  over. 

One  day,  the  inflated  numbers  on  both 
sides  of  the  debate  will  be  debunked. 
One  day,  the  last  angry  letter  from  a 
displaced  American  IT  worker  will  be  published. 


Unfortunately  for  IT 
managers  everywhere, 
that  day  is  not  today. 

The  emotional  back¬ 
lash  against  any  plans  to 
outsource  technology 
jobs  overseas  —  regard¬ 
less  of  how  economically 
or  competitively  driven 
—  is  a  force  to  be  reck¬ 
oned  with  in  today’s  IT 
workplace.  It  dampens 
the  morale  of  even  the 
most  valuable,  talented 
employees,  as  we  saw  recently  in  our 
Best  Places  to  Work  in  IT  survey 
[QuickLink  a4610].  One  reader  sent 
us  a  note  last  week  suggesting  that 
we  include  “foreign  outsourcing  sta¬ 
tistics”  in  future  Best  Places  reports, 
thereby  revealing  how  many  U.S.  cit¬ 
izens  are  part  of  the  IT  head  count  of 
the  companies  on  our  list. 

Negative  reactions  can  blast  back 
from  customers  as  well  as  from  affect¬ 
ed  employees,  as  Dell  and  Lehman 
Brothers  discovered  when  they  had  to 
pull  customer  service  operations  out 
of  India.  Despite  a  few  other  widely 
publicized  retreats,  the  majority  of 
Fortune  1,000  companies  are  forging 
relentlessly  ahead  with  offshoring 
plans  —  albeit  with  greater  stealth,  in 
hopes  of  avoiding  bad  publicity. 

The  bottom  line  driving  what 
Gartner  calls  an  “irreversible  mega¬ 
trend”  is  always  the  same:  cost  sav¬ 
ings  too  compelling  to  ignore  in  an 
open,  interconnected  global  market¬ 
place.  “To  outsource  offshore  is  not  a 
political  decision  on  the  part  of  the 
company.  It’s  an  economic  decision 
with  political  ramifications,”  says 
Mike  Hoyt,  CEO  of  Paradigm  Works. 
He’s  one  of  our  sources  in  “Damage 


Control”  (page  31,  and 
online  at  QuickLink 
47609),  a  story  about 
how  IT  managers  can 
cope  with  the  offshore 
backlash. 

One  impressive  exam¬ 
ple  of  a  company  dealing 
effectively  with  the  back¬ 
lash  problem  is  Union 
Bank  of  California,  which 
created  a  “sourcing  man¬ 
agement  office”  to  han¬ 
dle  any  concerns  that 
might  harm  its  reputation  with  cus¬ 
tomers.  The  office’s  duties  include 
handling  all  communications  about 
the  bank’s  offshore  plans. 

The  preventive  measures  we  dis¬ 
cuss  in  our  story  basically  boil  down 
to  having  honest,  frequent,  candid 
communication  with  everyone  in¬ 
volved.  CFO  magazine  gave  similar 
advice  last  month  in  its  cover  story 
about  offshoring,  noting  that  the  ma¬ 


jority  of  the  275  financial  executives 
surveyed  had  no  intention  of  cancel¬ 
ing  their  offshoring  plans,  despite  the 
backlash.  Some  42%  of  those  CFOs 
said  they  were  realizing  net  savings 
of  more  than  20%  from  their  offshore 
projects,  and  64%  were  planning  to 
increase  offshoring  levels. 

So  where  do  companies  go  wrong 
in  communicating  their  outsourcing 
plans?  Let  us  count  the  ways.  They 
overlook  a  basic  communications 
plan  for  internal  or  external  con¬ 
sumption  (the  offshoring  version  of 
a  “don’t  ask,  don’t  tell”  policy).  They 
fail  to  explain  why  a  given  project  is 
going  overseas  or  how  such  deci¬ 
sions  are  made.  They  try  to  down¬ 
play  the  negatives  about  workforce 
changes.  They  hide  their  plans  for  as 
long  as  possible,  then  look  guilty  and 
act  defensive  when  the  news  leaks. 

Some  analysts  are  predicting  that 
the  backlash  will  fade  away  by  next 
year,  and  I  hope  they’re  right.  But  in 
the  meantime,  IT  managers  must 
brace  for  the  backlash  and  deal  with 
it  decisively. 

“You  don’t  want  rumor  to  overtake 
reality,”  says  Michael  Treacy,  co¬ 
founder  of  Gen3  Partners,  an  out¬ 
sourcing  consultancy.  “In  the  end, 
you  can  only  politicize  so  long,  and 
then  the  facts  will  prevail.”  ©  48033 
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The  Systems 
Builder 

I  GOT  INTO  the  IT  business 
because  I  love  to  design 
and  build  systems.  After 
doing  a  lot  of  designing  and 
building  and  watching  others 
do  a  lot  of  designing  and 
building,  one  of  the  most 

important  things  I’ve  learned  is  that 
successful  projects  are  always  run  by  a 
certain  kind  of  person.  This  person 
can  speak  both  the  language  of  tech¬ 
nology  and  the  language  of  business. 
This  person  understands  the  specific 
business  issues  that  a  new  system  is 
supposed  to  address  and  is  always 
looking  for  simple  and  effective  ways 
to  use  technology  to  get  things  done. 

I  call  this  person  the 
systems  builder. 

The  competence 
of  the  systems 
builder  goes  a  long 
way  toward  deter¬ 
mining  the  success 
or  failure  of  any  de¬ 
velopment  project. 

Often,  the  systems 
builder  comes  up 
through  the  techni¬ 
cal  ranks  and  learns 
about  business  along 
the  way.  Sometimes 
the  systems  builder 
comes  up  through 
the  business  side  and 
manages  to  learn 
about  technology. 

Either  way,  this  is 
someone  who  can 
clearly  demonstrate  skills  in  two  main 
areas:  designing  systems  and  leading 
projects  to  build  systems. 

Next  month,  I’ll  discuss  the  six 
skills  that  are  the  basis  for  success 
in  leading  projects.  But  now  I’ll  look 
at  the  five  basic  skills  the  systems 
builder  needs  in  order  to  be  any  good 
in  the  first  area  —  designing  systems. 
There  are  certainly  other  skills,  but 
without  these  as  a  foundation,  the  sys¬ 
tems  builder  can’t  excel  in  the  design 
process: 

1.  Understand  the  business  operation. 

The  systems  builder  needs  to  have  a 
good  grasp  of  the  concepts  and  rules 
that  guide  the  business  operation.  This 
means  knowing  how  the  operation  fits 
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into  the  overall  business,  how  the  work 
of  the  operation  is  performed  and  what 
the  cost  and  profit  factors  are. 

2.  Create  an  inclusive  process.  Systems 
builders  must  be  able  to  consistently 
produce  competent  (and  sometimes 
even  brilliant)  designs  in  spite  of  high 
levels  of  complexity  in  both  business 
and  technology.  Complexity  loses 
much  of  its  power  to  intimidate  and 
confuse  if  groups  of  people  with  the 
appropriate  skills  and  experience 

are  brought  together  in  a  collabora¬ 
tive  process  where  they  can  pool 
their  collective  insights.  The  systems 
builder  is  the  one  who  orchestrates 
this  process. 

3.  Tolerate  not  knowing.  It’s  an  act  of  real 
discipline  to  immerse  yourself  in  the 
details  of  a  situation  and  resist  the 
temptation  to  rush  to  judgment.  Be¬ 
cause  of  the  complexity  inherent 

in  most  situations,  it’s  unlikely  that  a 
great  system  design  will  be  the  first 
or  even  the  second  one  that  comes 
to  mind. 

The  systems  builder  keeps  an  open 
mind  and  encourages  others  on  the 
project  to  do  the  same  as  they  investi¬ 
gate  the  issues. 

4.  Look  for  the  simple  underlying  patterns. 

This  is  the  creative  leap  where  investi¬ 
gation  and  analysis  give  way  to  synthe¬ 
sis  and  the  design  emerges.  At  first, 
you’re  assailed  by  the  surface  com¬ 
plexity  of  the  situation  and  all  the  po¬ 
tential  technology  that  could  be  used. 
When  you  allow  a  range  of  possible 
solutions  to  be  generated,  some  pro¬ 
foundly  simple  and  yet  very  useful 
insights  can  emerge. 

5.  Use  simple  combinations  of  technology  and 
process.  Beware  of  the  cleverness  trap. 
Cleverness  means  complexity,  and 
complex  designs  are  very  hard  to 
build.  Strive  to  create  system  designs 
that  display  an  elegant  simplicity.  Use 
as  few  technology  components  as  pos¬ 
sible,  and  use  each  component  for 
what  it  does  best. 

Use  these  components  to  support 
streamlined  workflow  processes  that 
will  achieve  the  performance  levels 
needed  to  effectively  respond  to  the 
business  issues  that  the  system  is 
meant  to  address. 

If  you  are  a  systems  builder  or  want 
to  become  one,  work  at  developing 
these  skills,  and  your  success  rate  will 
go  way  up.  If  you  are  an  executive  who 
sponsors  or  oversees  systems  develop¬ 
ment  projects,  make  sure  that  a  person 
with  these  skills  heads  each  project. 

©  47673 
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THORNTON  A.  MAY 

Success  With 
Word,  Mind 
And  Deed 

For  high-level  IT 
managers,  career  suc¬ 
cess  could  be  a  matter 
ofWMDs. 

No,  those  aren’t  weapons  of  mass  de¬ 
struction.  In  this  case,  WMD  is  short¬ 
hand  for  “words,  mind-sets  and  deeds.” 

Words  refers  to  the  messages  we 
send.  Mind-sets  are  the  mental  models 
that  are  at  work  in  our  own  brains  and 
in  those  of  key  constituents.  Deeds 
refers  to  how  we  and  key  constituents 
behave. 

Words 

Several  years  ago,  the  CEO  of  a  major 
software  vendor  visited  Tokyo.  Want¬ 
ing  to  reach  out  to  his  audience  of  very 
senior  IT  executives,  he  decided  to 
pull  a  Kennedy:  Just  like  J.F.K.  in  Ber¬ 
lin  and  Jackie  Kennedy  in  France,  he 
would  open  his  remarks  in  the  native 
tongue  of  his  audience.  He  wanted  to 


say,  “I  am  tickled  pink  to 
be  here.  I  am  so  happy  I 
could  die.” 

Instead  he  said,  “I  have  a 

rash  that  will  probably  kill 

„  _  » 

me. 

The  hygiene-conscious 
Japanese  were  in  no  hurry 
to  meet  with  this  CEO.  The 
lesson:  Have  a  message  that 
matters  and  is  connected  to 
what  you  are  trying  to  do. 

And  while  it’s  always  a  good 
idea  to  speak  the  language 
of  one’s  audience,  it’s  also 
important  to  make  sure  that 
the  message  translates  correctly. 

Mind-sets 

Research  sponsored  by  Lawson  Soft¬ 
ware  and  conducted  at  a  series  of  exec¬ 
utive  dinners  across  the  country  indi¬ 
cates  that  IT  leaders  with  accelerating 
career  momentum  have  a  real-time 
inventory  of  the  IT  mental  models 
that  are  at  work  in  and  around  the  en¬ 
terprise. 

An  IT  mental  model  is  the  particular 
way  in  which  a  person  thinks  about  IT 
—  values,  beliefs,  frameworks,  stories. 

Successful  IT  leaders  understand 
their  personal  IT  mental  models,  the 
IT  mental  models  of  their  internal  and 
external  customers,  and  the  IT  mental 


models  that  are  at  work 
among  their  competitors. 

Deeds 

Many  longtime  participants 
in  the  IT  game  observe  that 
for  all  our  fuss  and  bother, 
the  problems  we  are  work¬ 
ing  on  today  are  much  the 
same  as  the  problems  we 
were  working  on  20  years 
ago.  This  is  probably  be¬ 
cause  we  thought  for  the 
longest  time  that  our  job 
was  to  deploy  technology. 
As  new  technology  became 
available  and  expanded  what  we  could 
accomplish  with  a  computer,  we  de¬ 
ployed  it.  But  deploying  stuff  isn’t  our 
real  job.  Although  we’re  just  now  step¬ 
ping  up  to  it,  our  real  job  is  to  change 
workplace  behavior. 

Before  starting  an  IT  project,  one 
should  model  “before”  and  “after” 
workplace  behaviors.  IT  success  now 
hinges  on  how  people  act  —  their 
deeds  —  not  on  which  technical  de¬ 
vices  were  shipped  and  plugged  in. 

©  47952 
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Tech  Issues  Will  Delay  Music-Store  Death 


Keep  Users  in  Mind, 
And  Keep  It  Simple 

Larry  williams’  contribution 
[QuickLink  47099]  to  your  May 
31  letters  column  speaks  volumes 
about  how  some  techies  view  users 
with  distaste  and  arrogance.  Com¬ 
menting  on  a  column  about  the  per¬ 
ils  of  Sasser,  etc.,  Williams’  retort  is 
essentially  that  all  one  has  to  do  is 
install  hardware  and  software  fire¬ 
walls  and  disallow  a  bunch  of  soft¬ 
ware  and  secure-clear  administrator 
rights,  and  so  on. 

For  the  minuscule  percentage  of 
technically  adroit  PC  owners  and 
users,  this  is  certainly  all  child’s 
play.  The  issue  is  that  the  vast  ma¬ 
jority  of  PCs  are  operated  by  folks 
who  can  no  more  do  those  things 
than  they  can  replace  the  drivetrain 
of  their  cars. 

If  there  were  a  plague  of  poor  as¬ 
phalt  leading  to  more  accidents,  the 
cry  would  naturally  be  to  improve 
the  roads,  but  for  folks  of  Williams’ 
persuasion,  the  “simple  answer” 
would  be  to  just  install  extra  low 


gears  in  your  car  to  make  it  easier 
to  drive  those  “supposedly  danger¬ 
ous"  roads. 

Bob  Fately 

Partner,  Third  Wave  Inter¬ 
national,  Van  Nuys,  Calif. 


Not  Rocket  Science 

IN  THE  ARTICLE  “EU  Seeks  Quan¬ 
tum  Cryptography  Response  to 
Echelon"  [QuickLink  46947],  the  au¬ 
thor  observes  that  there  are  a  num¬ 
ber  of  technical  challenges,  includ¬ 
ing  building  “sensors  capable  of  re¬ 
cording  the  arrival  of  photons  at  high 
speed.”  Because  all  photons  travel 
exactly  at  the  speed  of  light,  it  is  un¬ 
certain  why  encrypted  ones  should 
require  special  treatment.  More  di¬ 
rectly  relevant  to  the  apparent  prob¬ 
lem  of  unauthorized  satellite  eaves¬ 
dropping  would  be  the  simple  solu¬ 
tion  of  not  leaking  communications 
skyward,  where  satellites  could  re¬ 
ceive  them.  Clearly,  quantum  cryp¬ 
tography  is  not  rocket  science. 

John  Michael  Williams 
Redwood  City,  Calif. 


PIMM  FOX  thinks  that  in  less 
than  a  decade,  the  big  brick- 
and-mortar  music  retailers  will  be 
out  of  business  [“The  Day  the  Music 
Stores  Died,"  QuickLink  46935]. 

He  goes  on  to  cite  Internet  down¬ 
loading  and  the  Apple  iPod  as  the 
technologies  that  will  destroy  music 
retailing. 

Although  10  years  is  a  long  time, 
it  won’t  be  long  enough  to  destroy 
the  music  business.  Many  collectors 
enjoy  the  liner  notes,  and  these 
don’t  come  with  downloaded  tracks. 
But  this  isn’t  the  only  thing  stopping 
the  wholesale  demolition  of  music 
retailers:  The  technology  ain’t  all 
that  great!  My  40GB  MP3  jukebox 
died  after  less  than  six  months. 

What  music  aficionado  wants  to 
trust  such  unreliable  technology? 

Even  more  troubling  is  the  greedy 
music  industry.  Until  it  can  agree  on 
a  model  and  format  that  works  on  all 
devices,  this  transformation  won’t 
occur.  The  pricing  needs  to  be  fixed, 
too;  $1  a  track  is  highway  robbery  if 


all  I’m  getting  are  some  bits  and 
bytes  and  not  a  tangible  disc  or  tape. 
And  I  want  to  be  able  to  copy  it  from 
my  PC  to  my  MP3  player  to  my  car  to 
a  tape  and  to  a  CD  -  multiple  times. 
Once  I’ve  bought  it,  it  should  be 
mine.  Let’s  solve  these  issues  first, 
then  we  can  talk  about  shutting 
down  the  CD  shops. 

Craig  S.  Mullins 
Director  of  technology 
planning,  Houston 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computerworld. 
PO  Box  9171, 500  Old  Connecticut 
Path,  Framingham.  Mass.  01701. 
Fax:(508)879-4843. 

E-mail:  letters@computerworid.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 
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If  your  company  is  compromised  or  experiences  downtime 
for  even  a  matter  of  minutes,  that  time  can  translate  into  lost 
profitability,  customers  and  dollars.  And  that  is  something 
none  of  us  can  afford. 

For  that  reason  the  McAfee®  Enterprise  Security  Center 
was  created:  an  exclusive  collection  of  news,  whitepapers, 
information,  analysis  and  strategies  for  securing  your 
networks  and  systems. 

Learn  new  strategies  for  securing  your  servers  and  protecting 
your  desktops  from  viruses.  Get  the  latest  information  on  how  to 
stay  on  top  of  the  latest  threats  to  your  network  and  bolster  your 
skills  in  synergizing  your  IT  staff  as  a  critical  business  asset. 


Content  for  the  McAfee  Enterprise  Security  Center  is 
supplied  by  these  awardwinning  IDG  publications: 


The  Resource 
for  Information 
Executives 


COMPUTERWORLD 

The  Voice  of  IT  Management 


cso 


The  Resource  for 
Security  Executives 


NetworkWorld 


Armed  with  this  knowledge,  you'll  not  only  strengthen 
your  network's  defenses,  you'll  also  enhance  your  IT 
leadership  and  business  skills,  benefiting  your  enterprise's 
bottom  line— and  your  own. 


Sponsored  by: 

K\  McAfee* 
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Simplifying  NAS  Management 

More  companies  are  choosing  technol¬ 
ogy  that  pools  and  virtualizes  net- 
work-attached  storage  systems  to  con¬ 
solidate  NAS  management.  Page  25 


CASE  STUDY 

Wireless  CRM  Takes  to  the  Field 

Pitney  Bowes’  new  wireless  field  service 
system  gives  technicians  both  a  broader 
wireless  coverage  area  and  expanded 
access  to  customer  data.  Page  24 
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SECURITY  MANAGER’S  JOURNAL 

Four  Steps  to  a  Secure  Budget 

Our  new  Security  Manager’s  Journal 
columnist  outlines  a  step-by-step 
strategy  for  freeing  up  funds  for 
critical  IT  security  projects.  Page  28 


Christofer  hoff  is  tak¬ 
ing  no  chances  when  it 
comes  to  protecting  his 
organization  against 
worms  and  viruses.  As 
the  director  of  enter¬ 
prise  security  services  at  Western 
Corporate  Federal  Credit  Union  (Wes- 
Corp),  Hoff  has  put  in  place  a  multilay¬ 
ered  architecture  designed  to  set  as 
many  barriers  as  possible  between  the 
bad  guys  and  his  data. 

Apart  from  the  usual  firewall  and  an¬ 
tivirus  tools,  the  San  Dimas,  Calif.-based 
company,  which  has  $25  billion  in  as¬ 
sets,  has  also  segmented  its  networks 
and  deployed  an  array  of  intrusion 
detection  and  prevention  tools,  client 
security  products  and  threat-modeling 
software.  Such  defense  in  depth  is  pre¬ 
cisely  what’s  needed  to  keep  marauding 
malware  at  bay  these  days,  say  security 
practitioners  such  as  Hoff. 

“The  worm 
problem  has 


But  companies  are  still  taking  an  av¬ 
erage  of  60  days  to  patch  their  systems, 
which  is  too  long,  says  Gerhard  Eschel- 
beck,  chief  technology  officer  at  Qualys 
Inc.,  a  Redwood  Shores,  Calif.-based 
provider  of  vulnerability  management 
services.  Also,  every  year  half  of  the 
most  critical  vulnerabilities  are  replaced 
with  new,  equally  serious  ones,  he  says. 

■  Exposure  to  risk  is  increasing  as  compa¬ 
nies  connect  their  secure  networks  with  those 
of  partners  and  other  third  parties.  The  bur¬ 
geoning  remote  and  wireless  user  pop¬ 
ulation  adds  to  the  problem. 

“There  are  more  avenues  that  can  be 
attacked,  which  is  why  perimeter  de¬ 
fenses  alone  are  no  longer  enough,” 
says  Greg  Murray,  vice  president  of  in¬ 
formation  security  at  Information  Re¬ 
sources  Inc.  in  Chicago.  IRI  does  mar¬ 
ket  research  for  some  of  the  world’s 
largest  food,  consumer  goods  and 
pharmaceutical  companies. 

■  Worms  are  being  released  at  an  ever- 
increasing  rate,  and  they’re  becoming  more 
lethal.  Four  of  the  five  worst  mass  out- 


catalyzed  the  relevancy  of  the  informa¬ 
tion  security  function,”  says  Hoff.  “It’s 
not  about  ROI  any  longer  but  about  the 
reduction  of  risk  on  investment.” 

Worms  and  other  malware  have  been 
around  for  years.  But  several  trends 
are  coming  together  to  make  them 
more  dangerous  than  before,  users  say. 

■  Worm  writers  are  taking  advantage  of 
newly  announced  software  flaws  more  quickly, 
giving  users  less  time  to  defend  their  systems. 
Last  year’s  Blaster  was  considered  fast 
when  it  exploited  a  vulnerability  in  26 
days.  This  May’s  Sasser  worm  took  17 
days,  while  the  Witty  worm  in  March 
was  out  in  one  day.  And  there  have 
been  a  few  “zero-day”  exploits,  which 
appear  before  a  flaw  has  been  disclosed 
or  a  fix  becomes  available.  Their  dam¬ 
age  has  been  limited,  but  it’s  only  a 
matter  of  time  before  a  virulent  one  is 
unleashed,  experts  say.  “This  is  a  war. 

If  the  users  are  to  win,  they  have  to 
beat  the  clock  every  single  time,”  says 
Eric  Litt,  chief  information  security  of¬ 
ficer  (CISO)  at  General  Motors  Corp. 


Companies  are  throwing  up  layers  of  protection 
as  new  worms  and  viruses  appear  at  an  ever- 

ing  pace,  by  jaikumar  vijayan 
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breaks  of  worms  —  MyDoom,  NetSky, 
Bagle  and  Sasser  —  have  taken  place 
this  year.  Antivirus  firm  Symantec 
Corp.  has  rated  more  threats  at  Catego¬ 
ry  4  —  its  most  severe  —  in  the  first 
part  of  2004  than  it  did  in  all  of  2003. 
For  instance,  MyDoom  infected  sys¬ 
tems  and  then  used  them  as  launch 
pads  for  denial-of-service  attacks 
against  Microsoft  Corp.  and  The  SCO 
Group  Inc.  Other  worms  have  attempt¬ 
ed  to  block  infected  systems  from 
downloading  patches  and  antivirus  up¬ 
dates,  while  others  have  been  used  to 
install  back  doors  and  steal  data. 

“The  day  of  the  digital  Pearl  Harbor 
that  a  lot  of  people  have  been  talking 
about  is  fast  approaching,”  says  Jamie 
Chanaga,  CISO  at  Geisinger  Health 
System  in  Danville,  Pa. 

Preparing  for  that  emergency  re¬ 
quires  a  security  architecture  capable 
of  automatically  detecting  and  block¬ 
ing  threats,  both  known  and  unknown, 
says  Litt.  “The  dominant  [antivirus] 
technologies  today  are  those  that  filter 
out  infections  based  upon  signatures,” 
he  says.  This  approach  works  only 
with  known  vulnerabilities  and  exploit 
code.  Given  the  shortening  time  be¬ 
tween  vulnerability  disclosures  and 
exploit  availabilities,  that  simply  isn’t 
enough,  Litt  says. 

“The  core  reason  why  worms  and 
viruses  are  so  effective  is  that  it  is  not 
always  feasible  for  companies  to  patch 
production  systems  right  away,”  says 
Chanaga.  The  goal  should  be  to  have 


enough  defense  layers  so  that  a  breach 
of  one  layer  won’t  compromise  your 
ability  to  do  business,  Litt  says. 

In  WesCorp’s  case,  the  company’s 
networks  have  been  segmented  by  ap¬ 
plication  function  and  business  value. 
For  instance,  all  of  its  SQL  servers  sit 
on  one  segment,  and  its  mail  servers 
sit  on  another.  Each  network  segment  is 
protected  by  an  array  of  intrusion  de¬ 
tection  and  prevention  systems,  and 
deep  packet-inspection  firewalls  and 
signature-based  antivirus  technologies 
conduct  filtering. 

WesCorp  uses  a  server-based  scan¬ 
ning  technology  from  WholeSecurity 
Inc.  in  Austin  to  scan  client  or  partner 
systems  for  Trojan  horses,  spyware 
and  other  malicious  code  before  letting 
another  party  log  into  its  corporate 
network.  A  Qualys  third-party  vulnera¬ 
bility  management  service  scans  for 
holes  and  helps  WesCorp  quickly  priori¬ 
tize  the  assets  that  need  to  be  protected 
in  the  event  of  an  attack.  Also  deployed 
is  software  from  Skybox  Security  Inc. 
in  Palo  Alto,  Calif.,  that  combines  fire¬ 
wall,  router,  network  and  vulnerability 
data  to  model  attacks. 

Technology  from  Crossbeam  Sys¬ 
tems  Inc.  in  Concord,  Mass.,  allows 
WesCorp  to  consolidate  the  manage¬ 
ment  of  all  of  its  security  components. 
The  result  is  impressive,  but  not  per¬ 
fect,  security.  “We  will  never  be  able  to 
bring  down  the  risk  to  zero,”  Hoff  says. 

It’s  crucial  to  install  host  firewalls, 
virtual  private  network  support  and 


MORE  THAN  SIGNATURES  NEEDED 


Signature-based  antivirus  technologies  i 


tion  strategies  but  won't  be  as  prominent  as  they 
are  now,  users  say. 

Traditional  antivirus  products  filter  out  worms  I 
and  viruses  by  matching  patterns  in  their  files.  The  r 
approach  is  still  considered  the  most  effective  in  ] 
blocking  known  threats,  especially  because 
some  worms  float  around  the  internet  for  years,  - 
users  say.  Companies  that  have  kept  their  virus 
signatures  updated  have  consistently  been  able  ? 
to  avoid  even  the  more  dangerous  outbreaks.  ? 

However,  the  technologies  don’t  work  against  l 
previously  unknown  worms.  For  such  products  § 
to  be  effective,  vendors  need  to  develop  new  5 
signatures  every  time  a  worm  appears.  This  is  true  : 
even  in  cases  of  multiple  worm  variants  that  may  J 
all  be  exploiting  the  same  vulnerability  or  use  the  t 
same  methods.  The  speed  at  which  vendors  can 
deliver  such  updates  is  becoming  increasingly 
crucial  as  hackers  exploit  holes  at  a  quicker  pace. 

Users  also  need  a  way  to  constantly  poll  for 
new  signatures  to  keep  their  files  updated.  Be¬ 
cause  of  the  increase  in  the  number  of  worms, 
companies  have  had  to  dramatically  increase  the  i 


number  of  times  they  check  for  updates  with 
antivirus  vendors,  sometimes  doing  so  as  often 
as  once  every  15  minutes.  “Worms  are  traveling 
faster  than  antivirus  updates,”  says  Gerhard 
Eschelbeck,  CTO  at  Qualys. 

In  the  future,  big  companies  won’t  be  able  to 
count  on  antivirus  vendors  to  win  the  race,  says 
Eric  Litt,  CISO  at  General  Motors. 

That  reality  is  forcing  many  of  them,  including 
GM,  to  look  for  technologies  capable  of  detect¬ 
ing  and  proactively  blocking  threats. 

Thermo  Electron  Corp.  a  $2  billion  manufac¬ 
turer  of  medical  equipment  in  Waltham,  Mass., 
is  planning  to  deploy  a  new  “memory  firewall” 
from  Determina  Inc.,  a  start-up  in  Redwood  City, 
Calif.  Instead  of  signature  matching,  Determina’s 
technology  uses  an  application  memory  scan¬ 
ning  technique  to  detect  and  block  even 
unknown  threats. 

Other  products  block  attacks  based  on  devia¬ 
tions  in  network  traffic.  While  such  products  are 
being  offered  as  alternatives  to  signature-based 
technologies,  experts  say  it's  too  early  to  predict 
how  effective  they’ll  be. 

-  Jaikumar  Vijayan 


DISCOVERY/ATTACK  LIFE  CYCLE 

As  this  graph  illustrates,  the  window  between  the  time  a  vulnerability  is  discovered  and  the  time  it  is 
exploited  is  shrinking.  Consequently,  security  teams  have  less  time  to  identify  and  fix  problems  before 
networks  are  subject  to  attacks.  source^  qualys  inc. 
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intrusion-detection  technologies  on  all 
endpoint  devices  and  to  have  ways  to 
enforce  compliance  with  clients  and 
business  partners,  says  Murray.  He 
uses  a  tool  from  Check  Point  Software 
Technologies  Ltd.  to  do  all  of  that. 

“The  days  when  you  could  simply 
have  a  titanium  outer  shell  are  over, 
considering  you  have  to  open  your  net¬ 
works  to  trading  partners,  vendors  and 
other  institutions,”  Chanaga  says. 

Real-time  monitoring  of  the  network 
and  all  systems  connected  to  it  is  also 
crucial  for  detecting  vulnerabilities 
and  prioritizing  responses,  says  Chana¬ 
ga,  who  is  using  Qualys  to  do  both. 

Lesson  Learned 

Sallie  Mae  Inc.  has  revamped  much  of 
its  worm  mitigation  strategy  after  be¬ 
ing  badly  mauled  by  the  Nimda  worm 
in  September  2001,  says  Marc  Houpt, 
the  company’s  information  security  ar¬ 
chitect.  Since  then,  Reston,  Va.-based 
Sallie  Mae  has  signed  up  with  New 
York-based  MessageLabs  Inc.  to  scan 
its  80,000  daily  e-mails  and  filter  out 
executable  files  and  other  suspicious 
extensions.  It  has  deployed  antivirus 
software  from  Computer  Associates 
International  Inc.  on  all  servers  and 
workstations  and  has  increased  the  fre¬ 
quency  of  its  searches  for  updated 
virus  signatures  from  twice  a  day  to 
every  four  hours.  The  company’s 
workstations  check  with  the  master 
antivirus  server  every  15  minutes. 

Sallie  Mae’s  information  security 
team  has  also  been  given  greater  au¬ 
thority  to  make  spot  decisions  about 
worms  and  viruses,  Houpt  says.  When 
MyDoom  started  spreading,  he  was 
able  to  quickly  convince  his  superiors 
to  shut  down  the  e-mail  servers  until 
the  problem  was  fixed.  Previously, 
such  a  shutdown  would  have  required 
“two  or  three  levels  of  authorization 
and  a  very  strict  on-the-spot  change- 
control  process,”  he  says.  “Now  all  it 
requires  is  a  consensus  between  the 
network  manager  and  myself.” 

It’s  important  to  keep  certain  issues 


in  mind  when  deploying  such  a  multi¬ 
layered  defense,  users  say. 

The  biggest  is  the  integration  of  the 
various  technology  components. 

Where  possible,  it’s  important  to  use 
buying  power  to  get  vendors  to  do  the 
integration  for  you  before  agreeing  to 
buy  a  product,  Hoff  says. 

Flaving  a  multilayered  strategy  also 
does  little  good  without  comprehen¬ 
sive  analytical  and  reporting  capabili¬ 
ties  to  interpret  and  present  the  infor¬ 
mation  that’s  gathered  by  such  sys¬ 
tems,  Murray  says. 

“More  security  technologies  doesn’t 
make  you  more  secure;  better  manage¬ 
ment  does,”  says  Sam  Curry,  a  vice 
president  at  CA. 

And  don’t  underestimate  the  sup¬ 
port  issues.  For  instance,  integrating 
security  into  endpoint  devices  will  in¬ 
evitably  result  in  more  calls  to  the  PC 
help  desk,  requiring  the  information 
security  group  to  assume  responsibili¬ 
ty  for  some  of  the  cost  burdens  as  well, 
Hoff  says.  So  end-user  training  is  an 
essential  component  of  any  worm  miti¬ 
gation  strategy. 

Ironically,  regulations  can  sometimes 
get  in  the  way.  For  example,  Geisinger 
is  unable  to  deploy  much-needed  patch¬ 
es  and  antivirus  software  on  exposed 
Windows-based  clinical  systems  be¬ 
cause  it  will  break  the  FDA  certifica¬ 
tion  on  those  systems,  Chanaga  says. 

The  effort  also  needs  to  be  balanced 
against  business  needs,  Houpt  says.  For 
instance,  when  the  information  securi¬ 
ty  team  gets  the  authority  to  shut 
down  crucial  servers,  it  must  have  a 
very  good  understanding  of  a  prob¬ 
lem’s  potential  effect,  he  says. 

“Your  infosec  team  needs  to  have  the 
technical  know-how  and  the  credibility 
to  make  an  impact  assessment,  and  the 
user  teams  need  to  be  able  to  trust  that 
knowledge,”  Houpt  says.  ©  47711 
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Wireless  CRM 

Takes  to  the  Field 

Pitney  Bowes’  revamped  field  service  system 
provides  broader  wireless  coverage  while 
giving  technicians  access  to  more  customer 
information.  BY  MARC  L  SONGINI 


While  many  companies 
are  still  testing  large- 
scale  wireless  CRM  proj¬ 
ects,  Stamford,  Conn.- 
based  mailing  systems 
vendor  Pitney  Bowes  Inc. 
is  an  experienced  practi¬ 
tioner.  The  $4  billion  company  set  up 
its  first  wireless  system  in  the  late  ’90s. 
Since  then,  it  has  deployed  a  second- 
generation  system  for  250  field  service 
employees  in  its  Document  Messaging 
Technologies  division,  which  sells 
high-end  inserter  mailing  systems. 

Now  the  company  is  wrapping  up  a 
more  sophisticated  wireless  CRM  roll¬ 
out  for  its  Global  Mailing  Systems  divi¬ 
sion,  where  some  1,500  wired  employ¬ 
ees  service  Pitney  Bowes  machines  de¬ 
signed  for  the  low-volume  distribution 
of  mail. 

The  newest  system  connects  field 
service  representatives  to  its  back-end 
call  center  and  service  applications. 
Using  pocket  PCs,  RIM  957s  from  Re¬ 
search  In  Motion  Ltd.  and  other  de¬ 
vices,  service  technicians  can  access  a 
wide  range  of  data  from  multiple  back¬ 
end  systems.  Such  data  includes  infor¬ 
mation  about  inventory  availability 
and  whether  calls  are  billable  or  cov¬ 
ered  by  contract. 

Early  Start 

The  company’s  first  wireless  CRM  sys¬ 
tem  was  more  limited.  It  relied  on  Mo¬ 
torola  Inc.  “brick”  client  devices  that 
connected  to  homegrown  CRM  sys¬ 
tems,  and  it  retrieved  service  call  data 
over  Motient  Corp.’s  wireless  data  net¬ 
work,  says  Ralph  Nichols,  service  pro¬ 
gram  manager  at  Pitney  Bowes. 

In  1999,  the  company  began  moving 
to  low-cost  RIM  devices  and  started 
work  on  an  integrated  field  service  and 


call  center  back  end,  says  Mark  Davis, 
vice  president  of  customer  service. 

In  2001  Pitney  Bowes  installed  field 
service  software  from  San  Mateo, 

Calif. -based  Siebel  Systems  Inc.  for  its 
Document  Messaging  division,  and  it 
upgraded  to  cellular  wireless  service 
from  Atlanta-based  Cingular  Wireless, 
which  uses  General  Packet  Radio  Ser¬ 
vice  (GPRS)  technology. 

For  wireless  connectivity  middle¬ 
ware,  Pitney  Bowes  uses  software  and 
services  from  Antenna  Software  Inc. 
Antenna  A3  and  SmartClient  field  ser¬ 
vice  software  links  field  workers  with 
RIM  handheld  devices  to  Siebel  sales 
force  automation  software  and  Pitney 
Bowes’  parts  ordering  system. 

Network  coverage  was  important,  so 
the  company  tested  several  carriers 
and  devices  before  settling  on  Cingu- 
lar’s  service  and  RIM’s  handheld  de¬ 


vices.  Jersey  City,  N.J. -based  Antenna 
was  the  logical  choice  for  gateway  soft¬ 
ware  and  services,  says  Paul  Weston, 
vice  president  of  CRM  at  Pitney 
Bowes.  Its  software  had  the  most  fea¬ 
tures,  included  systems  management 
tools  for  troubleshooting  breakdowns, 
supported  multiple  carriers’  networks 
and  was  already  Siebel-approved. 

Ensuring  the  convenience  and  us¬ 
ability  of  the  devices  was  also  key.  “If 
the  thing  is  difficult  to  use,  the  people 
will  find  ways  around  it,”  says  Weston. 
So  the  staff  made  sure  that  menus  on 
the  RIM  devices  were  easy  to  navigate 
and  included  special  product  codes  to 
help  users  place  inventory  orders. 

The  workflow  starts  in  the  system 
when  a  customer  calls  the  contact  cen¬ 
ter  to  place  a  field  service  request.  The 
Siebel  application  identifies  the  prod¬ 
uct  needing  repair,  selects  the  repre¬ 
sentative  to  dispatch  and  pushes  the 
request  out  to  that  technician’s  wire¬ 
less  device.  The  recipient  then  ac¬ 
knowledges  the  receipt  of  the  order. 

Messages  from  the  devices  are  rout¬ 
ed  to  Antenna’s  wireless  gateways  in 
New  Jersey.  XML-formatted  data  is 
then  forwarded  over  a  frame-relay  or 
VPN  connection  to  Pitney  Bowes’  data 
center,  where  it  passes  through  a  gate¬ 
way  server  before  being  routed  to  the 
back-end  applications. 

The  system  delivers  customer  data 
to  field  service  personnel  in  near  real 
time,  including  the  service  history  for 
a  given  customer  or  piece  of  equip¬ 
ment.  It  also  tells  the  technician 
whether  work  is  covered  by  contract 
or  is  billable  and  feeds  data  for  billable 
work  into  the  company’s  billing  sys¬ 
tem.  When  parts  are  required,  the 
Siebel  field  service  application  deter¬ 


mines  if  the  part  is  in  stock  and  sends 
information  on  parts  the  technician 
uses  to  a  legacy  inventory  application 
that  in  turn  connects  to  the  company’s 
SAP  supply  chain  management  system. 

For  areas  where  wireless  coverage  is 
spotty,  client  devices  either  use  a  dial¬ 
up  connection  or  store  information 
and  forward  it  later. 

Weston  says  that  better  information 
has  allowed  field  service  staff  to  solve 
problems  faster  and  complete  more 
calls  per  day.  Managers  now  can  get 
up-to-date  reports  on  what  activities 
service  personnel  are  engaged  in  and 
what  steps  were  taken  to  satisfy  cus¬ 
tomer  requests.  And  by  flagging  the 
problems  that  require  the  most  techni¬ 
cian  time,  Pitney  Bowes  has  been  able 
to  save  money  by  scheduling  proactive 
maintenance  calls. 

The  company  is  nearly  done  rolling 
out  a  similar  system  in  its  Global  Mail¬ 
ing  Systems  operation.  The  newer  sys¬ 
tem  features  smart  cell  phones,  RIM 
957s,  pocket  PCs  or  other  handhelds 
and  GPRS  services  provided  by  several 
carriers.  By  using  a  mix  of  carriers  and 
handheld  devices  with  Antenna’s 
SmartClient  software,  Pitney  Bowes 
estimates  that  it  can  cover  95%  of  its 
territory,  up  from  85%  with  the  previ¬ 
ous  system. 

The  Global  Mailing  unit’s  system  is 
similar  to  that  of  the  Document  Mes¬ 
saging  group,  but  it’s  completely  sepa¬ 
rate.  “There  is  a  uniqueness  between 
the  organizations,”  Davis  explains. 

“I’m  more  distributed  [than  the  Docu¬ 
ment  Messaging  unit]  with  a  greater 
breadth.” 

The  Global  Mailing  rollout  also  was 
about  five  times  more  costly  than  that 
of  the  Document  Messaging  unit’s  sys¬ 
tem.  The  Global  Mailing  system  uses 
more  expensive  Windows  CE-based 
handhelds  and  required  more  exten¬ 
sive  integration  with  the  company’s 
SAP,  billing,  call  center  and  other  ap¬ 
plications.  With  this  setup,  Pitney 
Bowes  hopes  to  create  a  single  system 
of  record  and  avoid  re-entering  the 
same  data  in  different  systems.  With 
the  resulting  productivity  gains,  the 
company  expects  the  system  to  pay  for 
itself  in  three  years. 

Weston  has  some  advice  for  others 
trying  to  build  similar  systems:  Test 
the  hardware  and  software  thoroughly, 
make  sure  the  devices  have  adequate 
battery  life,  and  plan  for  the  change 
management  such  a  project  requires. 
“The  key,”  he  says,  “is  understanding 
how  these  processes  interact  with  the 
rest  of  your  business  and  understand¬ 
ing  that  it’s  not  just  field  service.  It  af¬ 
fects  sales.”  ©  47707 


Pitney  Bowes’  Service  Management  System 


In  Pitney  Bowes’  Global  Mailing  Systems  division,  field  service  staffers  use  handheld  devices 
running  Antenna  SmartClient  software  to  access  customer  information  over  a  secure  VPN 
connection.  Information  passes  to  a  system  running  MQSeries  middleware  that  converts  the 
message  into  XML 


format.  The  message 
then  passes  to  the 
Siebel  system,  which 
automatically  updates 
inventory,  billing, 
call  center  and  other 
back-end  systems. 
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"...  at  SNW,  you  connect  with 
folks  you  normally  wouldn’t 
meet  and  capitalize  on  the 
serendipitous  exchange  of 
ideas ...” 

John  Seely  Brown 
Former  Director,  Xerox  Palo  Alto 
Research  Center  (PARC),  and  for¬ 
mer  Chief  Scientist,  Xerox 


"...  SNW  is  a  great  venue  for 
peer  discussion  ...  an  opportu¬ 
nity  to  provide  feedback  to 
vendors  on  what  users  need 
from  them  ...  I  sat  down  with 
my  key  vendors  and  shared 
information  ...” 

John  Greer 

Director,  IT  Infrastructure 
Pacific  Gas  &  Electric 
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Co-Owned  and  Endorsed  by 

VX-  SNIA 

Co-Owned  and  Produced  by 

COMPUTERWORLD 


Learn  How  to  Achieve 
Storage  Networking  Success 

•  Get  a  Contemporary  Overview  of  Today’s  Storage  Networking  Issues  and  Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  in  Storage  Networking  Technologies 

•  Hear  the  Latest  in  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 


Why  You  Should  Attend 

Are  you  responsible  for  managing  youreompany's  data  center  assets?  Want  to  exchange  innovative  ideas 
and  strategies  with  other  executives  who  share  the  same  objectives?  Then  attend  Storage  Networking 
World,  where  you'll  network  with  and  learn  from  renowned  experts  and  the  nation's  top  user  executives. 


What  You’ll  Learn 

In  this  executive-forum  setting,  you’ll  hear  directly  from  executives  and  managers  in  user  companies. 
They'll  address  a  wide  variety  of  today's  burning  issues  like: 


Selecting  and  Deploying  Storage  Networks 

•  SAN 

•  NAS. 

•  CAS  Options 

•  Deployment 

•  Data  Migration 

•  Scalability 

■  Interoperability 

•  Implementation  Considerations  and  Tips 

Data  Center  and  Infrastructure 
Considerations 

•  Operating  System  Platforms 

•  Utility/Grid  Computing 

•  Bandwidth  Requirements 

•  High  Availability 

•  Infrastructure  Tools 

•  Personnel  and  Training 

Storage  Security 

■  Infrastructure  Protection 

•  Security  Policies 

•  Advanced  Recovery  Solutions 

•  Preparing  for  External  Physical  Threats 
and/or  Hacker  Threats 

■  Disaster  Recovery 

•  Public/Private  Partnerships 

Managing  Storage  Networking  Solutions 

•  Management  Tools 

■  Global  Management 

•  Business  Processes 

•  Compliance  to  Industry  Standards 

Managing  Deployments  of  Existing  and 
Emerging  Technologies 

•  Procurement  of  Actual  Products 

•  Project  Management 

•  Implementation 

•  Education 

•  Management  Policies 

■  Long  Term  Management  and  ROI  Expectations 

Deploying  Storage  to  Meet  Industry 
Regulations 

•  HIPAA 

•  SEC 

•  FDA 

•  Sarbanes/Oxley  Act,  Patriot  Act,  etc. 


CTO  Insights 

•  Implementation  Tips 

•  Roadmaps  for  Success 

•  Product  Features  Users  Need  To  Know  To  Make 
Purchase  Decisions  Today 

•  New  Technologies  and  Standards  to  Plan  For 

•  Scalability,  Interoperability,  Speeds  &  Feeds,  etc. 


Critical  and  Emerging  Technology  Topics 

•  Virtualization 

•  Security 

•  Utility  Data  Center 

•  Virtual  Tape  Libraries  in  Open  Systems 

•  Cluster  Distributed  File  Systems 

•  Policy  Automation/Storage  Administrator 
Work  Flow  Automation 

•  Changing  Technology  Economics  Create  New 
Applications  of  Technology 

•  Information  Lifecycle  Management,  Disaster  Recovery 

•  Object  Based  Storage 

•  Blade  Servers 

•  Data  Protection 

High  Bandwidth  Storage  Applications 

•  Video  Streaming 

•  Rich  Media 

•  Image  Capture 

•  Distance  Learning 

•  Grid  Computing  for  Government  &  Scientific  Research 

•  Object-oriented  Storage 

Small  Medium  Business  Considerations 

•  Technology  Selection  Criteria 
■  Sl/Vendor  Selection  Criteria 

•  Operational  Considerations 

•  Special  Technology  Features 

•  ROI/TCO 

•  Case  Studies  &  Lessons  Learned 


Enterprise  Business  Applications 
and  Databases 

•  Storage  for  Business  Intelligence 

•  CRM 

■  ERP 

•  HR 

•  Data  Mining/Warehousing 

•  Applications  Deployment  Issues  and  Tips 

•  SLAs 

■  Technology  Selection 

•  When  to  Replace  Legacy  Infrastructure 

•  CFO  versus  the  CIO 


■  See  SNW’s  Interoperability 
&  Solutions  Demo 

No  other  storage  event  gives  you: 

•  30-plus  SNIA  member  companies 
collaborating  on  integrated  solutions 
•  the  opportunity  to  meet  leading 
experts  and  engineers 


=  IDC  Storage  Analyst  Briefing 

In  this  fast-paced  session,  IDC's  top  storage  analysts  will 
examine  companies'  growing  interest  in  deploying  tiered 
storage  solutions  and  assess  its  impact  on  storage 
components,  systems,  networks,  management  and  services. 
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Conference  At-a-Glance  (subject  to  change) 


For  details,  updates,  and  to  register  visit  www.snwusa.com/cw 

MONDAY,  OCTOBER  25 

9:30am  -  1 1 :30am 

Primer  and  Tutorial  Tracks 

1 1:30am  -  1:00pm 

Luncheon 

12:00pm  -  5:00pm 

Pre-Conference  Golf  Outing 

1 :00pm  -  6:00pm 

SNIA  Technical  Tutorials 

1 :00pm  -  5:00pm 

IDC  Analyst  Briefing 

7:00pm  -  9:00pm 

Welcome  Reception 

TUESDAY,  OCTOBER  26 

7:00am  -  8:00am 

Breakfast 

8:00am  -  12:00pm 

General  Conference  Sessions 

12:00pm  -  1 :30pm 

Luncheon 

1 :30pm  -  5:30pm 

General  Conference  Sessions 

4:00pm  -  5:30pm 

Concurrent  Sessions 

5:30pm  -  8:30pm 

Expo  with  Dinner  and  Interoperability  &  Solutions  Demo 

WEDNESDAY,  OCTOBER  27 

7:00am  -  8:00am 

Breakfast 

8:00am  -  12:00pm 

General  Conference  Sessions 

12:00pm  -  1 :30pm 

Expo  with  Luncheon 

12:00pm  -  7:15pm 

Interoperability  &  Solutions  Demo 

1 :30pm  -  3:45pm 

General  Conference  Sessions 

3:45pm  -  5:15pm 

Concurrent  Sessions 

5:15pm  -  7:15pm 

Expo 

7:30pm  -  9:00pm 

Gala  Evening 

THURSDAY,  OCTOBER  28 

7:30am  -  8:30am 

Breakfast 

8:30am  -  12:00pm 

Concurrent  Sessions 

12:00pm 

Conference  Concludes 

LEARN  FROM 
VISIONARIES  AND 
IT  USER  EXECUTIVES 


JOHN  HALAMKA 

MD,  MS,  CIO 

CareGroup  Health  System 
CIO,  Harvard  Medical  School 


RAPHEAL  HOLDER 

Vice  President 

Shared  Services  Operations 

Northrop  Grumman  IT 


ROD  MUELLER 

n  '  Manager  of  Technology 


STEVE  DUPLESSIE 

Founder  and  Senior  Analyst 
Enterprise  Storage  Group 


JON  WILLIAM  TOIGO 

CEO  and  Managing  Principal 
Toigo  Partners  International  LLC 


NICK  CARR 

Former  Executive  Editor  of  the 
Harvard  Business  Review 
and  author  of  “Does  IT  Matter?" 


JW  Marriott 
Grande  Lakes  Resort 

Orlando,  Florida 


Pre-Conference  Golf  Outing 

Complimentary  for  Registered  IT  Users 

The  Pre-Conference  Golf  Oufing  at  The  Ritz-  SPONSORED  BY 
Carlton  Golf  Club  located  adjacent  to  the  JW  Quantum 

Marriott  Grande  Lakes  Resort,  is  complimentary  - 

($125  value)  for  registered  IT  End-Users  (other  participants, 
including  sponsors  and  vendors,  may  play  on  an  “as  available”  basis 
and  are  responsible  for  all  applicable  golf  outing  expenses). 

For  details  contact  Michael  Meleedy  at  1-508-820-8529 


Hotel  Reservations  and  Travel  Services 

IDG  Travel  is  the  official  travel  company  for  Storage 
Networking  World.  They  are  your  one-stop  shop  for 
exclusive  discounted  rates  on  hotel  accommodations. 

To  reserve  your  accommodations,  visit: 

www.etcentral.com 

You  can  also  call  our  conference  housing  line  at: 

1-800-340-2262  (or  1-508-820-8686) 


•  i  no 

TRAVEL  SERVICES 


:er,  visit  www.snwusa.com/cw  or  call  1  -800-883-9090 
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Orlando,  Florida 


Application  for  Conference  Registration 

Fax  this  completed  application  to  1-508-820-8254.  Or  apply  online  at:  www.snwusa.com/cw 


Your  business  card  is 
REQUIRED 

to  process  your  application 

Please  affix  your  business  card  to  this  space  prior  to 
submitting  your  application.  Applications  submitted 
without  business  cards  will  not  be  processed. 

Questions?  Call  1-800-883-9090 


If  not  indicated  on  your  business  card,  please 
provide  the  following  required  information: 


Corporate  Email  Address 


Corporate  Website 


Registration  questions? 

Call  1  -800-883-9090  or  email  snwreg@computerworld.com 

Need  accommodations? 

Reserve  them  at:  www.etcentral.com 

Please  call  1-800-340-2262 
or  email:  eventhousing@idg.com 


Please  check  ONE  of  the  following: 


Earlybird  Registration  (through  September  14,  2004) 


Full/Onsite  Registration  (after  September  14,2004) 


□  I  am  an  IT  End- User* 

(Complete  Attendee  Profile  below) 


□  $895  General  Conference  Package  (October  26  &  27) 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 

□  $1,290  Total  4-Day  Package  (October  25,  26,  27,  28) 
(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 


□  $1,295  General  Conference  Package 

(includes  General  Conference  Sessions,  Expo,  Meals  &  Receptions) 

□  $1,690  Total  4-Day  Package  (October  25,  26,  27,  28) 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 


*  IT  End-Users  are  defined  as  those  who  are  attending  Storage  Networking  World  with  an  intent  (and  an  IT  spending  budget)  to  potentially  buy/lease  hardware/software/services,  etc.  from  our  conference  sponsors  and  are  not  themselves  an  IT  vendor.  As  such,  account  representatives, 
business  development  personnel,  analysts,  consultants  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  within  their  organization  are  excluded  from  the  “IT  End-User"  designation,  Interpretation  and  enforcement  of  this  policy  are  at  the  sole  discretion  of  Computerworld. 


□  I  am  a  Channel  Partner/ 
Integrator/Consultant 

(Complete  Attendee  Profile  below) 


□  $3,000  Total  4-Day  Package  (October  25,  26,  27,  28) 

(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


□  $3,000  Total  4-Day  Package  (October  25,  26,  27,  28) 

(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


By  participating  in  SNW's  Channel  Partner/Integrator  registration  package,  registrants  may  enjoy  the  following  benefits:  One  company  representative  may  receive  a  full  conference  pass  to  SNW  Fall  2004;  additional  company  representatives  pay  $695  each 
for  full  conference  passes;  company  may  invite  up  to  five  IT  User  customers  to  attend  SNW  Fall  (IT  Users  must  be  strictly  compliant  with  IT  User  definition  on  the  supplied  reg  form);  companies  registering  for  this  package  interested  in  joining  the  SNIA  are 
eligible  to  receive  a  $2,000  discount,  provided  that  membership  is  applied  for  pnor  to  January  1, 2005, 

Attendee  Profile:  This  section  MUST  be  completed  by  IT  End-Users  and  Channel  Partners/Integrators/Consultants  only  (optional  for  all  other  registrations)  ii 


Your  Business/Industry 

O  Transportation/Utilities 

□  Mining/Oil/Gas 

□  Non-Profit/T  rade  Association 

□  Media/Publishing 

□  Banking 

□  Finance 

□  Accounting 

□  Insurance 

□  Real  Estate 

□  Telecommunications 

□  Wholesale/Retail  (non-computer) 

□  Computer  Service  Provider 

O  Advertising/Marketing/Public  Relations 

□  Entertainment 

□  Education 

□  Food  Industry 

□  Government/Military 

□  Healthcare/Medical  Services 

□  Travel/Hospitality/Recreation 

□  Manufacturing  (non-IT) 

□  VAR/VAD/ ASP/System  Integrator 
(Channel/Integrator/Consultants  Only) 

□  Industry  Consultant/Storage  Solution  Integrator 
(Channel/Integrator/Consultants  Only) 


□  Manufacturing  (IT)  (Channel/Integrator/Consultants  Only) 

□  Computer  Retailer/Dealer/Wholesaler 
(Channel/Integrator/Consultants  Only) 

□  Software  Development  (Storage) 
(Channel/Integrator/Consultants  Only) 

□  Other  Computer  Related  (Storage) 
(Channel/Integrator/Consultants  Only) 

□  Other 

Your  Job  Title/Function 

□  CEO/COO/Chairman/President 

□  CIO/CTO 

□  VP/GM/Director 

□  (S/IT  Director/ Manager 

□  Other  IS/IT  Department  Manager/Supervisor 

□  Other  Corporate/Business  Manager 

□  CEO/COO/Chairman/President 
(Channel/Integrator/Consultants  Only) 

□  CFO/Controller/Treasurer 
(Channel/Integrator/Consultants  Only) 

□  VP/GM/Director  (Channel/Integrator/Consultants  Only) 

□  Sales/Marketing/Product  Staff 
(Channel/Integrator/Consultants  Only) 

□  CIO/CTO/Other  IS/IT  Manager 
(Channel/Integrator/Consultants  Only) 

□  Engineering  Staff  (Channel/Integrator/Consultants  Only) 


The  one  item  that  best  describes  your  involvement  in  the 
IT  purchase  process 

□  Authorize  the  purchase 

□  Approve  the  budget 

□  Initiate  the  purchase 

□  Evaluate/recommend  products,  brands,  vendors 

□  Identify/establish  the  need  to  purchase 

□  All  of  the  above 

Number  of  employees  in  your  entire  organization  (ALL  locations) 

□  Over  10,000 

□  5,000-9.999 

□  1,000-4,999 

□  500-999 

□  Less  than  500 

What  is  the  estimated  annual  revenue  of  your  entire 
organization? 

□  Over  $10  Billion 

□  $1  Billion  -  $9.9  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million  -  $499  Million 

□  Less  than  $  1 00  Million 


)  in  order  to  process  your  application. 

Your  organization's  annual  IT/IS  budget  for  all  IT/IS 
products,  or  if  you  are  a  Channel/Integrator  Partner  or 
Consultant,  what  is  the  annual  dollar  value  of  IT  prod¬ 
ucts/services  you  sell/resell/recommend/influence  for 
purchase  by  your  customers/clients. 

□  Over$1  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million -$499  Million 

□  $10  Million- $99  Million 

□  $1  Million  -  $9.9  Million 

□  Less  than  $1  Million 

Annual  company  IT  budget  (storage  products  and  services) 

□  Over$1  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million -$499  Million 

□  $10  Million  -  $99  Million 

□  $1  Million  -  $9.9  Million 

□  Less  than  $1  Million 

Would  you  like  to  receive  information  about  playing  In 
the  golf  outing  on  Monday,  October  25th? 

□  Yes 

□  No 


www.computerworld.com 


TECHNOLOGY 


COMPUTERWORLD  July  12, 2004 


SIMPLIFYING 

NAS  MANAGEMENT 

Companies  are  using  technologies 
that  virtualize  multiple  network- 
attached  storage  systems  into  a 
storage  pool.  BY  LUCAS  MEARIAN 


Mike  streb  recently  found 
himself  with  a  problem 
that’s  common  to  IT  man¬ 
agers  who  consolidate  data 
from  file  servers  on  net- 
work-attached  storage  de¬ 
vices.  After  years  of  growth, 
he  wound  up  with  100  different  NAS 
file  systems  to  manage  and  faced  in¬ 
creased  downtime  when  he  had  to  add 
application  servers  or  update  code. 

The  answer  for  Streb  and  a  growing 
number  of  users  like  him  is  to  pool  or 
virtualize  the  NAS  infrastructure. 

Streb,  vice  president  of  IT  services 
at  Warner  Music  Group,  installed  intel¬ 
ligent  switches  on  his  network  to  gen¬ 
erate  a  global  namespace,  or  distrib¬ 
uted  file  system,  that  creates  a  logical 
layer  between  servers  and  the  NAS 
boxes  that  store  their  files.  A  global 
namespace  spans  multiple  file  systems 
but  appears  to  end  users  as  a  single  lo¬ 
cal  drive  on  their  computers. 

Other  storage  administrators  are 
opting  for  an  appliance  that  sits  in 
front  of  NAS  devices  and  creates  a  log¬ 
ical  view  by  pooling  multiple  NAS  fil¬ 
ers  behind  it.  Policy-based  engines 
contained  in  intelligent  switches  and 
appliances  from  companies  such  as 
Acopia  Networks  Inc.,  NuView  Inc. 
and  BlueArc  Corp.  can  automatically 
balance  I/O  streams  and  capacity  be¬ 
tween  servers  and  increase  or  move 
storage  volumes  without  disrupting 
workflow. 

Complication  of  NAS  Growth 

The  NAS  market  has  grown  to  $14.7  bil¬ 
lion  because  the  technology  is  easy  to 
install  and  manage,  according  to  mar¬ 
ket  research  firm  IDC.  But  as  storage 
needs  grow,  companies  continue  to  in¬ 
stall  box  after  NAS  box,  and  each  re¬ 
quires  individual  management. 

Over  the  past  two  years,  adoption  of 
NAS  virtualization  technology  has 
been  slow,  according  to  Arun  Taneja, 
an  analyst  at  Taneja  Group  Inc.  in  Hop- 
kinton,  Mass.  But  interest  among  users 
has  picked  up  in  recent  months,  mainly 
because  of  the  maturity  of  the  NAS 


NuView  Inc. 

Houston 

PRODUCT:  StorageX 

HOW  IT  WORKS:  The  appliance 
creates  a  global  namespace 

WHERE  IT  RESIDES:  On  Windows 
2003  server  out  of  data  path 

PRICING:  S4.000  per  NAS  system 


market.  Now  that  many  companies 
have  “hundreds”  of  NAS  boxes  to  man¬ 
age,  individual  administration  has  be¬ 
come  a  nightmare,  Taneja  says. 

To  deal  with  that  problem,  New 
York-based  Warner  Music  last  month 
purchased  two  ARX1000  NAS  virtual¬ 
ization  switches  from  Acopia  to  handle 
millions  of  .wav,  MP3  and  graphics  files 
on  128  Unix  and  350  Wintel  servers. 
Streb  also  plans  to  install  four  Celerra 
NS600  NAS  servers  from  EMC  Corp. 
as  back-end  storage. 

Streb  has  five  storage  administrators 
who  manage  the  distribution  of  files 
across  Warner  Music’s  NAS  devices. 
That  task  alone  takes  up  about  20% 
of  their  time,  he  estimates.  “Now, 
through  a  policy  engine,  I  can  migrate 
the  data  from  one  box  to  another  and 
take  a  brief  outage  by  pointing  the 
global  namespace  somewhere  else, 
and  the  user  doesn’t  even  know  it  be¬ 
cause  it’s  all  done  behind  the  scenes,” 
Streb  says. 

Streb  is  testing  Acopia’s  switches 
on  20  Wintel  servers  and  says  he  plans 
to  complete  the  installation  over  the 
next  two  weeks.  He  also  says  that  he 
hopes  virtualization  will  open  his  data 


BlueArc  Corp. 

San  Jose 

PRODUCT:  SiliconServer  Titan 

HOW  IT  WORKS:  Virtualization  engine 
resides  on  NAS  box  in  application- 
specific  integrated  circuit  chip 

WHERE  IT  RESIDES:  On  NAS  box 
in  data  path 

PRICING:  S100.000+.  including  storage 


center  to  more  storage  vendors. 

“In  the  past,  it’s  been  really  compli¬ 
cated  for  me  to  introduce  something 
from  BlueArc  or  Network  Appliance 
without  creating  too  much  manage¬ 
ment  pain  for  me,”  Streb  says.  “Now  I 
feel  comfortable  opening  up  the  door 
to  additional  storage  vendors  and  let¬ 
ting  them  compete  more.” 

Different  Approaches 

Acopia’s  switches  sit  in-band  between 
end  users  and  file  servers  or  NAS  de¬ 
vices  in  the  I/O  stream,  while  products 
such  as  NuView’s  StorageX  software 
reside  on  a  Wintel  server  out  of  band, 
directing  files  to  the  appropriate  NAS 
device  or  volume  within  a  file  server. 
StorageX  is  resold  by  Network  Appli¬ 
ance  Inc.  under  the  name  Virtual  File 
Manager  (VFM). 

Mike  Karp,  an  analyst  at  Enterprise 
Management  Associates  Inc.,  a  con¬ 
sulting  firm  in  Boulder,  Colo.,  says  the 
argument  for  in-band  versus  out-of- 
band  devices  is  moot,  and  users  should 
pay  more  attention  to  how  well  a  de¬ 
vice  or  software  eases  management  of 
NAS  devices. 

“Typically,  the  knock  on  in-band 


Acopia  Networks  Inc. 

Lowell,  Mass. 

PRODUCTS:  The  high-end  ARX6000 
and  the  fixed-configuration  ARX1000 

HOW  IT  WORKS:  Switches  in  data  path 
map  file  requests  to  NAS 

WHERE  IT  RESIDES:  On  IP  network 
in  data  path 

PRICING:  The  ARX1000  lists  for 
S45.000:  the  ARX6000  lists  for 
S150.000 


technology  is  that  it  eventually  be¬ 
comes  a  choke  point,  but  I  rarely  talk 
to  a  company  that  says  ‘I’ve  maxed  out 
pipeline  to  my  NAS,’  ”  Karp  says. 
“Clearly,  what  you  need  is  some  kind 
of  common  interconnect,  so  com¬ 
mands  —  no  matter  what  kind  of  stor¬ 
age  you  have  —  go  out  and  manage  the 
various  units  in  the  storage  pool.” 

One  problem  with  managing  multi¬ 
ple  NAS  devices,  Karp  says,  is  that  file 
servers  based  on  Windows  use  the 
Network  File  System  protocol  to  com¬ 
municate  over  a  network,  and  servers 
based  on  Unix  or  Linux  use  the  Com¬ 
mon  Internet  File  System.  The  indus¬ 
try  should  agree  on  a  standard  way  for 
servers  to  make  requests  for  files  or 
services  over  the  network,  he  says.  In 
the  meantime,  storage  managers  con¬ 
tinue  to  virtualize  Unix  and  Windows 
environments  separately. 

Clay  Raedeker,  a  systems  adminis¬ 
trator  at  Bectel  SAIC  Co.,  says  he  re¬ 
cently  purchased  VFM  and  a  second 
FAS960  NAS  file  server  from  Network 
Appliance  to  help  control  file  distribu¬ 
tion  from  more  than  70  file  servers 
with  a  combined  total  of  12TB  of  data. 
Las  Vegas-based  Bechtel  SAIC  is  the 
prime  contractor  for  the  U.S.  Depart¬ 
ment  of  Energy’s  program  to  use  Yucca 
Mountain  in  Nevada  as  a  repository  for 
spent  nuclear  fuel. 

Raedeker  says  he  currently  has  to 
come  to  work  in  the  early  morning 
when  no  one  is  accessing  files  so  he 
can  spend  two  or  more  hours  remap¬ 
ping  users  when  he  adds  servers  or 
expands  capacity. 

“We’re  trying  to  map  individual 
users  to  individual  shares  and  individ¬ 
ual  servers,  and  it  becomes  extremely 
difficult  to  manage,”  he  says.  “Just  con¬ 
tacting  people  and  putting  proper  no¬ 
tices  out  is  hard  enough.” 

With  the  Network  Appliance  instal¬ 
lation,  Raedeker  says  his  staff  will  be 
able  to  map  to  a  shared  file  in  a  com¬ 
puter  at  any  time,  without  having  to 
specify  the  storage  device  it’s  on  and 
“without  having  to  interact  with  users 
at  all.”  O  47734 


Network  Appliance  Inc. 

Sunnyvale,  Calif. 


HOW  IT  WORKS:  Creates  a  global  name- 
space.  aggregating  files  located  on  NAS 
systems  and  Windows  servers  to  present  a 
single  logical  "pool''  of  storage 


WHERE  IT  RESIDES:  On  NAS  box 
in  data  path 

PRICING:  S2.000  S50.000  per  filer:  roughly 
S2.000  per  terabyte  of  capacity  supported 


PRODUCT:  Virtual  File  Manager 
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REVOLUTION 


They  could  fight  wars,  drive  cars  and 
patrol  data  centers.  By  Lucas  Mearian 


Robots,  from 
mechanical 
dogs  that  can 
learn  new  tricks 
to  automated  vacuum  cleaners 
that  avoid  furniture,  are  steadi¬ 
ly  becoming  apart  of  everyday 
life.  But  the  real  robot  boom  lies 
just  ahead,  experts  say. 

In  the  future,  robots  could 
help  determine  the  outcome  of 
wars  and  identify  problems  in 
data  centers.  Office  buildings 
may  come  to  life  as  they  use 


FUTURE 

WATCH® 


Wi-Fi  to  dispatch  robots  to  con¬ 
trol  human  access,  test  heating 
and  cooling  systems,  and  fetch 
tools  for  workers. 

Computerworld  recently 
spoke  about  the  future  of  robots 
with  three  experts:  Chuck  Thorpe, 
director  of  Carnegie  Mellon 
University’s  Robotics  Institute; 
Jeanne  Dietsch,  CEO  ofMobile- 
Robots.com  in  Nashua,  N.H.;  and 
Vijay  Kumar,  a  professor  in  the 
Department  of  Mechanical  En¬ 
gineering  and  Applied  Mechan- 


This  18-in.-high  robot  rolls 
around  HP  data  centers 
and  finds  hot  spots,  using 
temperature  sensors. 


ics  at  the  University  of  Pennsyl¬ 
vania.  Here’s  what  they  said: 

WHERE  WILL  ROBOTS  SERVE  IN 
THE  FUTURE? 

KUMAR:  They’ll  fight  our  wars. 
My  robots  will  fight  your  ro¬ 
bots.  It’s  like  playing  chess. 

It’ll  be  an  expensive  game,  but 
I  think  it  will  minimize  loss  of 
life.  I  don’t  know  it’s  some¬ 
thing  our  leaders  want  to  hear 
about,  though. 

WHAT’S  THE  FUTURE  OF  ROBOTS 
IN  THE  SERVICES  SECTOR? 
THORPE:  That’s  the  real  fron¬ 
tier  for  robots  —  getting  them 
out  of  the  manufacturing  world 
and  interacting  much  more 
with  people  in  our  day-to-day 
chores.  That’s  a  little  tougher. 
If  you  think  about  an  assembly 
line,  it’s  set  up  so  that  every¬ 
thing  is  predictable.  If  you 
think  about  the  job  of  creating 
a  robot  butler  to  operate  in 
your  house,  the  difference  be¬ 
tween  pile  of  clothes  which 
should  be  picked  up  and  a 
sleeping  cat  which  shouldn’t  be 
picked  up  is  a  little  bit  tricky. 

The  manipulation  skills  re¬ 
quired  to  make  a  bed  —  flip¬ 
ping  up  the  corner  of  the  mat¬ 
tress  and  tucking  in  a  sheet  so 
it  looks  straight  —  is  compli¬ 
cated.  Some  of  those  jobs  will 
take  a  long  time  before  robots 
can  really  do  them  as  well  as 
people  do  them. 

To  really  have  a  humanoid 
robot  walking  around  like 
C-3PO  or  like  Rosie  on  The 
Jetsons  is  still  a  long  ways  off. 

DECADES? 

THORPE:  Probably. 

CAN  ROBOTS  HELP  INFORMATION 
TECHNOLOGY? 

DIETSCH:  Hewlett-Packard  uses 
our  PatrolBot  in  their  data 
centers.  It’s  got  temperature 
sensors.  It  drives  around  sev¬ 
eral  times  a  day,  and  the  data 
from  these  patrols  is  used  to 
create  3-D  models  of  the  heat 
in  the  facility.  If  there’s  a  prob¬ 
lem  in  the  facility,  the  comput¬ 
er  or  a  human  can  send  the  ro¬ 
bot  out  to  check  on  it. 

Our  robots  are  computers  on 
wheels.  When  programmers 
start  realizing,  “Oh,  I  can  drive 
my  computer  around  and  make 
it  do  things,”  they’ll  come  up 


with  all  sorts  of  interesting 
things.  For  example,  they  could 
keep  track  of  any  asset  in  the 
facility  based  on  RFID  tags. 

WHAT’S  HARD  ABOUT  MAKING 
ROBOTS  ACT  LIKE  HUMANS? 
THORPE:  I  think  you  could  turn 
that  question  around  and  say, 
“Wow,  humans  are  a  lot  more 
complicated  than  we  thought.” 

We’re  striving  for  a  couple 
different  things  with  robots. 
Sometimes  we’re  trying  to 
make  them  very  much  like  hu¬ 
mans,  and  sometimes  we’re 
trying  to  make  them  be  a  lot 
better  than  humans.  Where 
we’ve  had  our  greatest  success 
is  when  we  let  the  robots  be  ro¬ 
bots  and  do  what  they’re  best 
at  and  let  humans  be  humans 
and  do  what  they’re  best  at. 

A  couple  of  guys  from  my 
lab  have  spun  off  a  company 
that  makes  a  little  TV  camera 
that  watches  the  road  as  you’re 
driving.  It  doesn’t  drive  your 
car,  but  it’s  there  to  watch,  and 
if  you  start  to  get  sleepy  and 
start  to  drive  off  the  road,  it 
will  beep  at  you  and  wake 
you  up  before  you  become 
an  accident  statistic. 

WHAT  ELSE  ARE  YOU  WORKING  ON? 
THORPE:  We’ve  got  61  faculty 
members  with  120  projects. 
We’ve  got  robots  doing  every¬ 


thing  from  cleaning  paint  off 
ships  to  search  and  rescue  in 
hazardous  environments.  We 
have  snake  robots  that  can 
crawl  through  skinny  little 
holes,  and  great  big  military 
scout  robots.  We  have  teams 
of  robots  playing  soccer. 

That’s  a  great  way  to  study 
teamwork:  How  do  robots  co¬ 
ordinate  to  tackle  a  project?  In 
the  latest  version  of  that,  we 
have  a  team  that  consists  of 
robots  and  people;  how  do  ro¬ 
bots  and  people  collaborate  to 
solve  a  difficult  task? 

CAN  YOU  SPECULATE  ON  SOME 
OF  THE  MORE  FAR-OUT  APPLICA¬ 
TIONS  FOR  ROBOTS? 

KUMAR:  My  colleagues  would 
argue  the  biggest  opportunity 
for  robots  is  in  entertainment. 

There  are  many,  many 
prototypes  of  robots  that  are 
intended  to  be  domestic  com¬ 
panions.  They  walk  like  hu¬ 
mans  and  talk  like  humans, 
but  unlike  pets,  they  don’t 
dirty  up  your  apartment. 
DIETSCH:  Our  robots  are  made 
to  work  indoors.  We’re  work¬ 
ing  next  toward  working  out¬ 
doors.  Everyone  thinks  GPS 
has  solved  the  problem  for 
robots,  but  it  hasn’t  at  all.  If 
you’re  under  tall  buildings  or 
trees,  GPS  is  not  reliable. 

The  problem  with  working 
outdoors  is  that  you’re  working 
on  three-dimensional  terrain. 
Going  from  building  to  build¬ 
ing,  depending  on  terrain,  is 
not  so  bad.  I’m  hoping  we  can 
do  that  in  one  to  two  years.  Fol¬ 
lowing  streets  and  sidewalks  — 
if  we  can  do  that  reliably  in 
three  or  four  years,  that  will  be 
good.  But  well  still  not  be  able 
to  avoid  cars  going  40  mph. 
THORPE:  Certainly,  within  25 
years,  well  have  robots  assist¬ 
ing  surgeons  to  be  more  pre¬ 
cise,  robots  enabling  elderly 
people  to  live  in  their  houses 
longer  and  not  have  to  go  into 
nursing  homes,  [and]  robots 
doing  a  lot  of  the  dull  jobs  we 
don’t  like  to  do,  so  we  can  have 
more  fun  and  do  the  more  in¬ 
teresting  jobs.  O  47844 


REMOTE  BRAINS 

Robots  don’t  have  to  carry  their  brains 
with  them.  See  why  online: 

QuickLink  47835 
www.computerworid.com 
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MPUTERWORLD  HAS  BEEN  NAMED 
MAGAZINE  OF  THE  YEAR  FOR  2004. 

Every  year  the  prestigious  American 
Society  of  Business  Publication  Editors 
(ASBPE)  selects  one  publication  with 
80,000  or  more  subscribers  to  receive 
this  top  honor.  The  award  can  go  to  any 
business  publication  in  any  industry 
category,  and  we  won!  We  are  proud 
that  our  ongoing  commitment  to 
editorial  integrity,  audience  focus 
and  in-depth  coverage  has  been 
recognized  by  this  auspicious  award. 
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Four  Steps  toa 
Secure  Budget 

A  seasoned  security  manager  offers 
hard-nosed  advice  on  howto  get  critical 
IT  security  projects  funded.  By  Roger  Foix 


After  working  as  an  in- 
house  security  manag¬ 
er  in  the  financial  ser¬ 
vices  industry  for  many 
years,  I  recently  moved  to  con¬ 
sulting  work.  This  will  give  me 
the  opportunity  to  work  in  a 
variety  of  industries  (my  cur¬ 
rent  contract  is  with  a  compa¬ 
ny  in  the  health  care  industry) 
and  projects. 

I’ve  spent  the  past  few  days 
thinking  about  the  many  is¬ 
sues  I  face,  trying  to  decide 
which  one  to  discuss 
in  this,  my  first  col¬ 
umn.  In  the  end,  it 
was  an  easy  decision: 
extortion.  I’m  not 
talking  about  pre¬ 
venting  employees  or 
outsiders  from  steal¬ 
ing  funds.  I’m  referring  to  my 
ability  to  “extort”  appropriate 
funding  from  management. 

There  are  less-cynical  ways 
of  looking  at  the  budgeting 
process,  but  my  experiences 
over  the  past  few  years  at  dif¬ 
ferent  companies  have  made 
getting  blood  out  of  a  stone 
look  simple  in  comparison. 

Many  security  managers 
labor  under  the  misapprehen¬ 
sion  that  the  budget  process 
consists  of  working  out  how 
much  you  need,  spending  a 
few  weeks  coaxing  your  fig¬ 
ures  into  the  bizarre  formats 
that  the  finance  group  re¬ 
quires,  then  defending  your 
important  projects  in  meet¬ 
ings.  But  my  successful  bud¬ 
gets  have  been  the  result  of 
a  different  process  —  one  in 
which  I  laid  the  groundwork 
well  ahead  of  time.  Here  are 
four  steps  I  follow  to  obtain 
funding  from  that  parsimo¬ 
nious  corporate  bean  counter. 

Make  the 
Business  Case 

Start  by  going  back  to  your  se¬ 


curity  basics  and  calculating 
your  risk  profile.  Determine 
the  potential  financial  loss 
arising  from  each  of  your 
threats,  and  multiply  that  by 
the  annualized  percentage 
likelihood  of  the  loss  occur¬ 
ring  to  get  the  annualized  loss 
expectancy  (ALE).  Then 
demonstrate  how  much  your 
project  will  reduce  the  ALE  — 
and  how  much  money  it  will 
save  the  company. 

Assuming  you  have  a  sound 
business  case,  docu¬ 
ment  this  clearly,  ex¬ 
plain  your  reasoning 
in  great  detail,  and 
then  submit  it  to  the 
finance  people.  It 
will  get  rejected  al¬ 
most  immediately, 
of  course,  because  no  one  in 
finance  will  understand  a 
word  of  it.  But  don’t  worry; 
you  have  to  go  through  this 
step  only  to  show  that  you’ve 
done  your  homework  and  to 
lay  the  groundwork  for  more 
productive  tactics  later  on. 

Introduce  FUD 

Next,  use  fear,  uncertainty  and 
doubt  to  your  advantage.  FUD 
is  the  most  important  acro¬ 
nym  to  salespeople  hawking 
IT  security  wares,  and  you  are 
trying  to  sell  your  own  IT  se- 


There  are  less-cynical 
ways  of  looking  at  the 
budgeting  process,  but 
. . .  getting  blood  out 
of  a  stone  looks  like 
a  simple  task  in 
comparison. 
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curity  services  to  the  corpo¬ 
rate  bean  counters.  Sow  fear 
(“Did  you  hear  about  that 
hacker  who  broke  into  NASA? 

I  hope  that  doesn’t  happen  to 
us.”),  uncertainty  (“Yes,  I 
know  we  spent  $500,000  on 
securing  our  network  perime¬ 
ter  last  year,  but  we  need  to 
make  sure  it’s  working.”) 
and  doubt  (“70%  of  security 
breaches  are  internal.  I  won¬ 
der  who  the  criminals  are  in 
our  company?”).  Sometimes 
this  beginner’s  tactic  works, 
but  any  chief  financial  officer 
who  has  been  around  the 
block  a  few  times  will  blow 
FUD  out  of  the  water.  Still,  it’s 
still  worth  tiying  just  to  see 
what  answers  you  get.  You  can 
always  use  those  responses 
the  next  time  an  IT  security 
salesperson  comes  calling. 

Befriend  Your  Auditor 

The  next  time  you  pass  an  au¬ 
ditor  in  the  corridor,  give  him 
a  big  smile.  These  people 
write  long-winded  reports, 
and  while  no  one  reads  the 
main  text,  everyone  reads  the 
executive  summaries.  Then 
these  reports  go  on  file,  as  do 
management’s  responses.  Best 
of  all,  the  auditors  eventually 
check  back  to  see  whether 
management  has  addressed 
the  issues  the  reports  have 
raised. 

While  the  threat  of  a  hacker 
attack  or  a  virus  infestation 
makes  the  budget  gods  ner¬ 
vous,  the  thought  of  three 
years’  worth  of  audit  reports 
pointing  a  finger  at  their  in¬ 
competence  will  give  them 
night  sweats.  A  scared  budget- 
setter  is  a  generous  budget- 
setter,  so  your  internal  audi¬ 
tors  are  a  major  ally.  The  same 
goes  for  external  auditors  and 
your  compliance  team,  too,  if 
you’re  in  a  regulated  industry. 

So  make  friends  with  these 
people.  That  should  be  easy, 
since  everyone  else  tries  to 
avoid  them.  Then  drop  a  few 
choice  lines  into  the  conversa¬ 
tion  like,  “I’d  really  appreciate 
your  opinion  on  our  firewall 
setup.”  In  no  time  at  all,  you’ll 
have  auditors  crawling  all  over 
the  areas  in  which  you  want  to 
spend  money.  Six  months  lat¬ 
er,  senior  management  will  get 
a  report  saying  how  dire  the 


problems  are  in  that  area. 
Then,  seven  months  later, 
you’ll  submit  your  budget  re¬ 
quest  for  money  to  address 
those  issues. 

Choose  Your  Allies 

Every  company  has  its  alpha 
dogs,  and  they’re  rarely  in  IT. 
You  may  think  that  the  CIO  is 
at  the  top  of  the  food  chain, 
but  in  budget  meetings,  every¬ 
one  complains  to  him  about 
how  much  IT  spends  and  how 
the  help  desk  still  can’t  sort 
out  the  small  issues.  This  dis¬ 
cussion  invariably  comes  up 
just  before  his  $17.5  million 
request  to  fund  a  project  that 
even  he  doesn’t  understand 
properly. 

The  CIO  has  a  hard  fight,  so 
you  must  look  elsewhere  to 
find  your  alpha  dogs.  In  soft¬ 
ware  houses,  they’re  the  sales¬ 
people;  in  investment  banks, 
they’re  the  senior  traders;  in 
pharmaceuticals,  they’re  the 
research  and  development 
folks.  Set  up  meetings  with 
them  and  tell  them  what  you 
need,  using  no  more  than  two 
technical  terms  in  any  one- 
hour  meeting.  Then  tell  them 
what  might  happen  to  the 
company  if  security  fails. 

Three  months  later,  when 
the  budget  cycle  starts,  submit 
your  request  to  the  CIO.  He’ll 
go  into  meetings  expecting 
the  usual  beating,  but  this 
time  the  alpha  dogs  will  be  de¬ 
manding  to  know  why  he  isn’t 
spending  more  on  security. 
He’ll  have  the  answers  on 
hand,  you’ll  get  your  funding, 
and  everyone  will  go  away 
happy  —  or  as  happy  as  any¬ 
one  can  be  after  a  three-hour 
budget  meeting. 

So  there  you  have  it:  the 
four  key  steps  to  budgeting 
success.  Good  luck,  and  re¬ 
member  to  get  started  now. 

If  you  do,  you  may  just  be  in 
time  to  get  the  money  you 
need  for  next  year.  I 


WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real 
security  manager,  “Roger  Foix,”  whose 
name  and  employer  have  been  disguised 
for  obvious  reasons.  Contact  him  at  roger. 
foix@hushmail.com  or  join  the  discussion 
in  our  forum:  QuickLink  at590 

To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 

O  computenworld.com/secjournai 
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WHERE  THE  MONEY  IS 


Average  annual  growth  rate  in  base 
pay,  from  2003-04,  by  job  title: 

Manager,  security 
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VP/director,  security 
Web  security  manager 


8,4% 


Security  systems  administrator 


Senior 


5.9% 


SOURCE:  FOOTE  PARTNERS  LLC. 
NEW  CANAAN.  CONN.. 
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SpamKiller 
Mobile  Security 
Tool  Updated 

Information  Security  Corp.  in 
Deerfield,  III.,  has  released 
SecretAgent  Mobile  for  Micro¬ 
soft  Pocket  PC  2002  and  Win¬ 
dows  Mobile  2003.  Secret- 
Agent  manages  and  secures 
documents  stored  on  handheld 
devices.  The  new  version, 
available  now,  includes  sup¬ 
port  for  ANSI-compliant  digital 
signatures,  has  new  workflow 
features,  provides  automated 
key  history  management  and 
enables  shared  viewing  and 
editing  of  encrypted,  archived 
documents.  Pricings 
$59.95  perdevic 
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SpamKiller 
New  Rules 

McAfee  Inc.  has  updated  the 
rules  set  for  its  SpamKiller 
products.  The  monthly  rules 
updates  are  now  more  granu¬ 
lar,  according  to  the  Santa 
Clara,  Calif.-based  company. 
New  features  include  100  rules 
that  follow  the  Federal  Trade 
Commission’s  labeling  stan¬ 
dards  for  sexually  explicit 
spam,  URL  rules  that  identify 
e-mail  with  Web  addresses 
embedded  in  the  body  text  and 
a  rule  to  detect  the  Sober.h 
spambot  Trojan  horse,  which 
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SpamKiller  for  Mail  Servers 
and  SpamKiller  appliances, 
will  be  available  this  month. 
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MontaVista  Readies 
Linux  Tool  Kit 

Next  month,  MontaVista  Software 
Inc.  will  unveil  its  Linux  Profes¬ 
sional  Edition  Application  Devel¬ 
opers  Kit,  which  is  designed  for 
building  applications  to  run  on 
MontaVista-embedded  Linux.  The 
Pro  ADK  tool  set  is  built  around 
MontaVista’s  Eclipse-based  inte¬ 
grated  development  environment 
and  includes  core  MontaVista 
Linux  software  libraries  and 
header  files,  according  to  the 
Sunnyvale,  Calif.-based  company. 
Developers  can  use  the  tool  kit  on 
Windows,  Solaris  or  Linux  work¬ 
stations.  Pricing  starts  at  $3,000 
per  developer. 


IBM  Unit  Moves 
To  Hyades  Platform 

IBM’s  Rational  Software  division 
announced  last  week  that  it  will 
standardize  its  suite  of  automated 
software-quality  tools  on  the 
Hyades  open-source  platform. 
The  Hyades  project  is  a  subgroup 
of  the  Eclipse  open-source  proj¬ 
ect  that  IBM  spun  off  as  an  inde¬ 
pendent,  nonprofit  corporation. 

By  supporting  Hyades,  Rational 
plans  to  provide  third-party  ven¬ 
dors  and  IT  organizations  with  a 
standard  platform  on  which  to 
build  products  that  will  work  with 
its  testing  tools. 


NLayers  Aims  For 
App  Optimization 

NLayers  Inc.  last  week  announced 
nLayers  InSight,  an  appliance 
designed  to  provide  application 
optimization.  Working  without 
agents,  the  appliance  tracks  ap¬ 
plication  relationships,  dependen¬ 
cies,  usage,  demand  and  service 
levels  over  time.  InSight  provides 
policy-based  notifications,  alerts 
and  recommendations  through  a 
troubleshooting  dashboard,  ac¬ 
cording  to  San  Jose-based  nLay¬ 
ers.  The  appliance  also  tracks  ap-  | 
plication  usage,  demand  and  ser¬ 
vice  levels.  Available  now,  InSight 
costs  $45,000  for  a  perpetual  li¬ 
cense  or  $2,438  per  month  for  a 
subscription. 


TOMMY  PETERSON 

E-voting’s  Rush 
T5  Failure 


N  THE  WAKE  OF  the  painful  experiences  of 
2000,  the  choice  of  the  mechanism  used  to 
record  and  tally  votes  in  this  year’s  presidential 
election  may  be  almost  as  controversial  as  the 
battle  between  the  candidates.  Unfortunately,  a 


hefty  portion  of  state  and 
local  jurisdictions  have 
prematurely  adopted  elec¬ 
tronic  voting  systems. 

E-voting  in  this  year’s 
election  is  a  terrible  idea 
because  of  both  real  tech¬ 
nical  limitations  and  the 
perception  that  the  systems 
are  unreliable  and  vulnera¬ 
ble  to  tampering.  That’s 
something  of  a  problem, 
considering  more  than  30% 
of  all  voting  in  the  election 
will  be  done  on  electronic  machines. 

This  isn’t  just  a  public  relations  is¬ 
sue  or  one  that  will  go  away  when  citi¬ 
zens  get  used  to  the  technology.  A 
mounting  record  of  problems  with 
e-voting  has  tarnished  elections  in 
Georgia,  California  and  Texas,  among 
other  places,  and  seems  to  justify 
widespread  voter  skepticism. 

Part  of  the  problem  arises  from  the 
complexity  of  e-voting  systems.  The 
code  that  makes  up  these  systems  is  so 
large  that  there’s  no  efficient  way  for 
election  officials  to  ensure  that  it’s  free 
of  malware  or  to  completely  debug  it, 
according  to  testimony  Johns  Hopkins 
University  professor  Avi  Rubin  gave 
before  the  U.S.  Election  Assistance 
Commission  this  spring. 

The  technology  simply  isn’t  ready  to 
be  used  for  the  most  basic  and  critical 
function  in  any  democracy.  And  even 
if  it  were,  the  processes  and  protocols 
needed  to  monitor  even  high-perform¬ 
ing  systems  aren’t  in  place,  judging  by 
the  report  from  IT  security  experts  as¬ 
sembled  by  the  Brennan  Center  for 
Justice  at  New  York  University  School 
of  Law  and  the  Leadership  Conference 


on  Civil  Rights.  The  pan¬ 
el’s  mandate  was  to  devise 
a  strategy  for  ensuring  the 
security  of  touch-screen 
direct-recording  electronic 
(DRE)  voting  systems. 

The  recommendations 
of  the  group  are  all  emi¬ 
nently  sensible:  Train  all 
election  workers  on  securi¬ 
ty  procedures.  Develop 
random  testing  procedures 
to  detect  malicious  code  or 
bugs  in  e-voting  software. 
Create  and  follow  standardized  proce¬ 
dures  for  responding  to  security 
threats  and  incidents.  You  get  the  idea. 
But  it’s  a  little  alarming  that  the  panel 
had  to  make  these  recommendations 
to  fill  an  existing  procedural  gap. 

To  be  fair,  the  chief  recommenda¬ 
tion  of  the  panel  isn’t  so  obvious,  and 
following  it  is  essential  to  the  success 
of  any  e-voting  system.  According  to 
the  report,  each  jurisdiction  that  plans 
to  use  an  e-voting  system  should  hire  a 
well-qualified  independent  security 
group  to  evaluate  the  system’s  poten¬ 
tial  for  failure  and  vulnerability  to  at¬ 
tack.  The  outside  security  team  should 
be  free  of  ties  to  systems  vendors  and 
be  given  unlimited  access  to  software 
code  and  configuration  information. 

This  is  precisely  the  right  approach 
to  both  harden  the  defenses  of  DRE 
voting  systems  and  put  to  rest  some  of 
the  public’s  basic  fears  about  vote  tam¬ 
pering.  If  an  expert  outsider  can  take  a 
hard  look  at  the  code  on  a  Diebold  vot¬ 
ing  system,  fewer  citizens  will  be  wor¬ 
ried  about,  say,  whether  Diebold 
Chairman  Walden  O’Dell’s  support  of 
President  Bush  (he’s  a  big  fund-raiser 
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for  Bush’s  campaign)  might  have  influ¬ 
enced  the  system’s  design. 

But  most  jurisdictions  haven’t  put  any 
of  the  recommendations  in  place,  and 
it’s  too  late  to  get  it  all  done  by  Novem¬ 
ber,  as  has  been  pointed  out  by  a  chorus 
of  security  experts  [QuickLink  47931]. 

The  headlong  rush  to  e-voting  grew 
out  of  demands  for  reform  following 
the  chaos  of  the  2000  presidential 
election.  The  $4  billion  allocated  by 
the  federal  government  to  enact  those 
reforms  got  the  attention  of  vendors 
that  were  eager  to  make  a  big  sale.  It’s 
time  to  slow  down,  even  if  it  means 
shelving  e-voting  until  2008. 

Setting  up  a  parallel  paper  trail  for 
voters  within  an  e-voting  system,  as 
some  have  suggested  (including  Com- 
puterworld’s  Sharon  Machlis  —  see 
QuickLink  47905),  is  not  the  answer. 
That  would  be  cumbersome,  threaten 
the  secrecy  of  the  ballot  and  still  leave 
the  system  open  to  tampering.  Which 
is  why  a  federal  judge’s  decision  last 
week  to  uphold  California’s  decertifi¬ 
cation  of  DRE  systems  until  vendors 
provide  voter-verifiable  paper  audit 
trails  and  other  security  improvements 
[QuickLink  48022]  isn’t  enough. 

In  four  years,  processes  could  be  in 
place  that  force  transparency  on  all 
vendors  of  e-voting  systems.  The  use 
of  blind-signature  encryption  proto¬ 
cols  could  preserve  secret  balloting 
while  giving  voters  a  means  to  verify 
election  results.  There’s  not  much  up¬ 
side  in  using  e-voting  systems  for  the 
election  that’s  less  than  four  months 
away,  and  the  risks  are  enormous. 

If  you  thought  pregnant  chads  in  the 
2000  election  were  bad,  wait  until  you 
see  what  a  determined  hacker  could 
do  to  the  democratic  process  this  fall. 
That  is,  of  course,  if  we’re  lucky 
enough  to  detect  the  attack.  ©  48002 
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OPINION 

Regenerating  IT 


Risk  management  is  an  idea  whose  time  has 
finally  come,  says  Cutter  Consortium  ana¬ 
lyst  Tom  DeMarco  (left).  He  explains  how 
project  managers  can  help  their  businesses 
embrace  risk  and  reap  the  rewards.  Page  34 


Companies  go  through  innovation  stages,  so  IT  needs 
to  provide  the  right  help  at  the  right  time,  says  Geoffrey 
A.  Moore  of  TCG  Advisors.  Depending  on  the  stage, 
the  company  may  need  IT  to  support  collaboration  or 
hypergrowth  or  to  help  break  down  silos.  Page  35 


Amputating  a  “broken”  IT  shop  through 
outsourcing  squanders  precious  time  and 
resources,  says  Bart  Perkins.  You’re  better 
off  investing  in  a  sound  project  to  bring  the 
failed  organization  back  to  life.  Page  38 


Last  November,  after  a  deluge  of 
customer  complaints  about  un¬ 
intelligible  English,  lengthy 
telephone  waits  and  poor 
service,  Dell  Inc.  rerouted  tech¬ 
nical  support  for  its  U.S.  corporate 
clients  from  a  call  center  in  India  to  fa¬ 
cilities  in  Texas,  Idaho  and  Tennessee. 

Weeks  later,  Lehman  Brothers  Inc. 
followed  suit,  shifting  offshore  help 
desk  support  for  the  financial  firm’s 
internal  users  back  to  the  U.S. 

Another  company,  Fremont,  Calif.- 
based  Everdream  Corp.,  pulled  the 
plug  on  its  offshore  help  desk  center  in 
Costa  Rica  in  April.  The  reason:  plum¬ 
meting  customer  satisfaction. 

Elsewhere,  a  decision  by  the  Wash¬ 


ington  State  Health  Care  Authority  to 
use  offshore  labor  for  a  major  IT  con¬ 
tract  prompted  legislation  that  would 
effectively  bar  state  agencies  from  fu¬ 
ture  use  of  offshore  contractors. 

For  CIOs,  offshore  outsourcing  used 
to  be  a  pretty  straightforward  dollars- 
and-cents  decision  —  a  relatively  mod¬ 
est  financial  investment  in  cheap  for¬ 
eign  labor  in  return  for  significantly 
lower  ongoing  operational  costs. 

Not  anymore.  Backlash  from  em¬ 
ployees  and  customers  has  triggered 
productivity  and  revenue  losses,  plus 
more  than  a  few  public  relations  night¬ 
mares  and  political  donnybrooks. 

Clearly,  U.S.  companies  are  in  the 
hot  seat  when  it  comes  to  offshore  out¬ 


sourcing.  But  despite  the  backlash,  in¬ 
cluding  the  ongoing  public  outcry  over 
lost  U.S.  jobs  and  the  heated  rhetoric 
of  politicians  in  a  presidential  election 
year,  most  businesses  have  no  inten¬ 
tion  of  scaling  back  or  delaying  their 
offshore  plans.  Indeed,  86%  of  96  at¬ 
tendees  polled  at  a  Gartner  Inc.  out¬ 
sourcing  conference  in  May  said  none 
of  the  backlash  factors  would  cause 
them  to  change  their  offshore  plans. 

The  reason  is  pure  and  simple:  eco¬ 
nomics. 

“Customers  are  constantly  pursuing 
cost  benefits.  It’s  a  constant,  like  gravi¬ 
ty,”  says  Mike  Hoyt,  CEO  of  Paradigm 
Works  Inc.,  a  chip  design  company  in 
Andover,  Mass.,  that  sends  design  and 


IT  work  to  India.  “To  outsource  off¬ 
shore  is  not  a  political  decision  on  the 
part  of  the  company.  It’s  an  economic 
decision  with  political  ramifications.” 

Political  Problems 

But  those  ramifications  are  consider¬ 
able,  and  mounting  backlash  from  em¬ 
ployees,  corporate  partners  and  con¬ 
sumers  substantially  increases  the 
risks  involved  in  offshore  outsourcing, 
says  Alfred  Ricci,  who  heads  the  newly 
launched  sourcing  management  office 
at  Union  Bank  of  California  (UBOC)  in 
Los  Angeles.  A  technical  decision  to 
move  work  offshore  could  “absolutely” 
trigger  enough  of  a  backlash  to  affect  a 
company’s  stock  price,  Ricci  says. 


Howto  combat  offshore  outsourcing  backlash.  By  Julia  King 
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As  an  example,  he  mentions  Califor¬ 
nia  Senate  Bill  1386  [QuickLink  47344], 
which  requires  a  company  to  inform 
customers  if  their  privacy  may  have 
been  compromised.  “A  violation  of  that 
law  [by  an  offshore  outsourcer]  would 
have  a  tidal-wave  effect,  which  could 
result  in  a  downgrading  of  the  bank’s 
creditworthiness,”  he  notes. 

To  mitigate  that  risk  and  minimize 
damage,  the  UBOC  created  a  dedicated 
sourcing  office,  which  reports  to  an  ex¬ 
ecutive  vice  president  and  handles  not 
only  all  contracts  for  professional  ser¬ 
vices  and  staff  augmentation,  but  also 
all  strategy  and  communications  re¬ 
garding  offshore  plans. 

Internal  Issues 

Two  of  the  thorniest  backlash  prob¬ 
lems  around  offshore  outsourcing  are 
rumors  and  employee  flight,  Ricci  says. 
“The  first  reduces  productivity,  and 
with  the  second,  the  bank  loses  skills 
and  knowledge,”  he  notes.  The  sourc¬ 
ing  office  helps  prevent  both  problems. 

It  assists  senior  management  in 
preparing  presentations  to  line  em¬ 
ployees  about  the  effect  outsourcing 
will  have  on  them.  It  also  provides 
managers  with  a  list  of  answers  to  fre¬ 
quently  asked  questions  so  all  informa¬ 
tion  is  consistent.  Moreover,  the  bank 
has  a  person  dedicated  to  tracking  leg¬ 
islation  and  regulatory  updates  that 
could  affect  how  and  where  the  com¬ 
pany  outsources  IT  work. 

Ricci  emphasizes  that  the  cost  of  run¬ 
ning  the  sourcing  office  is  “100%  over¬ 
head.  But  the  way  you  mitigate  some  of 
the  risks  associated  with  outsourcing  is 
to  plow  some  of  the  cost  savings  back 
into  the  monitoring  and  management 
of  the  [outsourcing]  relationship.”  That 
includes  managing  employees  and  cus¬ 
tomers.  “Basically,  the  cost  savings  is 
50%.  You  take  25%  of  that  and  put  it  in 
legal,  contracts,  extra  management. 

You  can’t  be  greedy,”  Ricci  says. 

Synygy  Inc.,  a  software  and  services 
company  in  Conshohocken,  Pa.,  that 
has  development  centers  in  Pune,  In¬ 
dia,  and  Iasi,  Romania,  is  hoping  to 
minimize  employee  backlash.  It  offers 
U.S.  employees  who  might  otherwise 
be  laid  off  the  choice  of  working  at  one 
of  those  centers  at  a  salary  equivalent 
to  what  local  IT  employees  earn,  which 
is  30%  to  70%  less  than  in  the  U.S. 

In  addition  to  cost  savings,  the  “ex¬ 


change  program”  offers  other  benefits, 
says  Chief  Technology  Officer  Chetan 
Shah.  “It  helps  people  gain  experience 
and  understand  why  this  global  model 
is  so  important.  They  also  gain  respect 
for  their  foreign  counterparts. 

“You  need  to  be  honest  with  em¬ 
ployees,”  explain  the  economics  of  the 
situation  and  offer  them  the  right  to  re¬ 
turn  when  jobs  become  available  in  the 
U.S.  again,  Shah  adds. 

But  choosing  which  IT  employees 
should  remain  after  sending  work  off¬ 
shore  can  be  tricky,  warns  Gartner  ana¬ 
lyst  Linda  Cohen. 

“Not  all  people  are  going  to  make 
the  transition  to  higher-level  positions 
here  as  the  commodity  work  is  moved 
offshore,”  she  says,  adding  that  CIOs 
often  choose  the  wrong  people  to  stay. 
“Typically,  they  choose  the  guys  who 
stuck  with  them  and  stayed  up  all  night 
to  fix  broken  code.  They  usually  pick 
people  who  do  the  very  things  they’re 
choosing  to  outsource.” 

The  solution,  Cohen  says,  is  to  pro¬ 
file  all  IT  employees,  flagging  as  keep¬ 
ers  “those  with  consultative  skills  who 
aren’t  wedded  to  how  work  is  done  but 
instead  are  wedded  to  the  outcome.” 

CIOs  should  also  be  forewarned  that 
IT  workers  aren’t  the  only  potential 
source  of  employee  backlash.  Business 
managers  and  workers  in  other  depart¬ 
ments  are  often  resistant  to  change, 
says  Kaushik  Bhaumik,  vice  president 
of  business  technology  consulting  at 
offshore  outsourcing  vendor  Cog¬ 
nizant  Technology  Solutions  Corp.  in 
Teaneck,  N.J. 

“Each  one  of  those  organizations  has 
gotten  used  to  working  with  IT  in  a 


certain  way,  and  they  may  be  used  to 
Tom  or  Mary  from  IT.  So  you  need  to 
identify  those  users’  key  concerns,  and 
it  may  mean  keeping  Tom  or  Mary 
where  they  are  and  developing  a  role 
around  them,”  he  says. 

Bhaumik  also  recommends  choosing 
“change  leaders”  to  remain  on  board  as 
employees.  “Change  leaders  speak  up 
at  meetings  and  command  respect  from 
peers,  regardless  of  their  titles,”  he  says. 
“People  listen  more  and  espouse  change 
when  they  hear  it  from  their  peers.” 

Lay  Out  Plans 

Counseling  corporate  customers  about 
how  to  prevent  or  deal  with  worker 
and  customer  backlash  to  offshore  out¬ 
sourcing  is  a  growing  part  of  a  consul¬ 
tancy’s  work,  Bhaumik  says.  The  most 
important  advice  he  gives  clients  is  to 
have  what  he  calls  an  offshore  road  map. 

“One  of  the  most  painful  aspects  of 
[offshore  outsourcing]  is  when  it 
comes  out  in  dribs  and  drabs,”  he  says. 
“It  can  be  very  disconcerting  to  peo¬ 
ple.  It  just  stops  work.”  Bhaumik  advis¬ 
es  clients  who  are  offshoring  more 
than  25  jobs  to  lay  out  what  they  are 
doing  in  three,  six,  nine  and  12  months. 
“People  respond  better  to  a  long-term 
road  map  and  their  place  on  it,  rather 
than  a  road  map  that  appears  to  be 
thought  up  on  the  fly,”  he  says. 

Regardless  of  the  extent  of  work 
to  be  sent  offshore,  the  absolute  cor¬ 
nerstone  of  all  backlash-control  strate¬ 
gies  has  to  be  factual  information, 
experts  say. 

“You  don’t  want  rumor  to  overtake 
reality,”  says  Michael  Treacy,  author  of 
several  management  books  and  co¬ 
founder  of  Gen3  Partners  Inc.,  an  In¬ 
ternet  and  offshore  outsourcing  con¬ 
sulting  firm  in  Boston.  “In  the  end,  you 
can  only  politicize  so  long,  and  then 
the  facts  will  prevail.” 

According  to  Treacy,  the  “hysteria” 
that  surrounds  offshore  outsourcing 
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WHEN  DEALING  WITH  EMPLOYEES: 
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DELIVER  facts.  ~ 

INCLUDE  all  stakeholders. 

REINVEST  part  of  offshore  savings 
in  sourcing  management. 


WHEN  DEALING  WITH  CUSTOMERS: 


MINIMIZE  movement  of  custi 

facing  applications  offshore. 

GUARANTEE  service  levels. 

STATE  benefits  in  terms  of  custi 
value,  not  internal  cost  savings. 


doesn’t  reflect  reality.  He  says  the 
highest  prediction  of  the  number  of 
jobs  lost  to  offshore  outsourcing  is 
300,000,  yet  the  U.S.  economy  has  130 
million  jobs.  “That  means  offshore  out¬ 
sourcing  accounts  for  one  quarter  of 
1%  of  the  American  economy,”  he  says. 


Customer  Concerns 

In  dealing  with  customers,  Treacy  ad¬ 
vises  CIOs  and  other  executives  to  al¬ 
ways  explain  their  decision  to  go  off¬ 
shore  in  terms  of  the  value  it  brings  to 
the  customer.  “Customers  fundamen¬ 
tally  don’t  care  what  you’re  doing  with 
your  employees,”  he  says.  “That’s  why 
every  communication  to  customers 
must  be  couched  in  such  a  way  that 
you’re  providing  better  value  to  them.” 

The  best  way  to  control  damage,  of 
course,  is  not  to  outsource  offshore. 
That’s  the  strategy  at  DSLExtreme,  a 
Canoga  Park,  Calif.-based  cable  com¬ 
munications  and  Internet  service 
provider  with  50,000  subscribers.  The 
company  tries  to  offset  its  higher  labor 
costs  by  touting  itself  as  a  hometown 
player  —  “a  local  company  with  a  local 
feel,”  says  CEO  Ari  Ramezani. 

The  downside,  Ramezani  says,  is  the 
unavoidable  fact  that  consumers  have 
to  be  willing  to  pay  more  for  services 
from  companies  that  don’t  outsource 
overseas.  047609 


AVOIDING  MISTAKES 

Learn  10  communications  mistakes  companies 
commonly  make  when  they  move  IT  functions  offshore: 

QuickLink  47612 

Off  to  India:  One  Synygy  employee  relates  her 
experience  moving  offshore  with  her  job: 

O  QuickLink  47611 
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Middleware  is  Everywhere 
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Key 

MIDDLEWARE  IS  IBM  SOFTWARE.  Powerful  software 

likeTivoli®  and  WebSphere®  And  it’s  at  the  heart  of  solving 
what  analysts  call  the  key  issue  of  2004:  automation. 

IBM  middleware  is  open  and  can  deliver  it  all  at  a  pace 
to  match  your  needs.  It  anticipates  problems,  responds 
to  change  and  optimizes  resources.  And  it  all  leads  to 
meeting  business  goals.That’s  ON  DEMAND  BUSINESS. 

1.  Increased  ATM  activity  detected  instantly. 

2.  Identities  confirmed  securely. 

3.  Online  banking  increases  dramatically. 

4.  IT  resources  optimized  dynamically. 

5.  Bank  serves  customers  easily. 

Learn  more  about  middleware  and  IBM’s  leadership  role  in  automation  at  ibm.com/middleware/automate 
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Managing 
‘Real’  Risks 

Tom  DeMarco  says  knowing  how 
to  manage  project  risks  enables 
companies  to  take  bigger  ones. 


To  get  big  payoffs,  you 
1  need  to  take  big  risks, 

I  1  i  4 1  ■  says  Cutter  Consortium 
analyst  Tom  DeMarco.  In 
his  most  recent  book.  Waltzing  With 
Bears,  he  and  co-author  Timothy  Lister 
explain  how  project  managers  can  help 
their  businesses  embrace  risk  and  reap 
the  rewards.  He  told  Kathleen  Mely- 
muka  why  risk  management  is  an  idea 
whose  time  has  finally  come. 

You  and  Tim  Lister  have  written  about  many 
topics  over  the  years.  Why  risk  management 
now?  We  have  moved  from  a  focus  on 
risk  control  to  a  focus  on  risk-taking. 
When  you’re  trying  to  enable  people  to 
take  risks,  then  you  really  need  to  use  a 
much  more  disciplined  approach  that 
allows  you  to  assess  and  track  the  risk. 
It  sounds  paradoxical,  but  it’s  the 
change  in  mind-set  from,  “Make  this 
go  away”  to  “Make  it  possible  for  me  to 
take  some  really  big  risks  without  bet¬ 
ting  the  farm  on  them.”  All  the  systems 
that  are  changing  the  world  are  very 
risky  systems,  but  the  payback  is  enor¬ 
mous.  So  we  need  much  more  method¬ 
ical  ways  to  take  risks. 

You  call  risk  management  “adult  project 
management."  Why?  Children  are  al¬ 
lowed  to  maintain  a  blase  presumption 
that  there  is  nothing  bad  in  the  world. 
Adults  worry  about  the  bad  things  that 
can  happen.  In  pushing  aside  any  con¬ 
sideration  of  failure,  the  can-do  man¬ 
agement  philosophy  is  intrinsically 
childlike.  We  need  to  move  past  that. 
Can-do  is  a  recipe  for  being  able  to 
take  only  small  risks. 


management?  It  makes  risk-taking  pos¬ 
sible.  It  doesn’t  oblige  you  to  abandon 
your  stretch  goal;  it  only  causes  you  to 
consider  your  fallback  plans  for  if  that 
goal  is  not  reached.  It  builds  a  much 
more  healthy  relationship  between 


builder  and  buyer,  in  which  people  are 
able  to  talk  maturely  about  uncertainty 
instead  of  pretending  they’re  certain 
when  they  haven’t  got  a  clue.  It’s  a  way 
to  scrub  out  the  little  white  lies  that 
are  so  much  a  part  of  the  builder/ 
buyer  relationship. 

What’s  the  hardest  thing  about  managing 
risk  in  an  IT  project?  Risk  is  an  abstrac¬ 
tion:  something  that  may  or  may  not 
happen.  We  are  not  used  to  dealing 
with  abstractions  on  project  plans. 
Every  activity  on  a  project  plan  has  to 
be  done.  Any  that  might  have  to  be 
done  are  not  on  the  plan.  The  whole 
notion  of  uncertainty  is  hard  to  wrap 
your  mind  around.  It’s  anti-intuitive 
and  also  countercultural  in  some 
places.  There  are  some  places  where 
you  can  be  wrong  but  you’re  not  al¬ 
lowed  to  be  uncertain. 

Risk  management  seems  so  obvious.  Why 
are  IT  groups  so  averse  to  it?  There’s  a 
presumption  built  into  the  heart  of  IT 
project  planning  that  starting  a  project 
off  toward  unrealistic  goals  does  no 
harm.  But  if  you’ve  been  through  a 
project  that  was  done  that  way,  you 


know  it  does  terrible  harm.  It  causes 
you  to  do  things  in  the  wrong  order 
and  leave  out  things  that  need  to  be 
done.  But  still,  we  figure  out  the  most 
optimistic  possible  scenario  and  plan 
according  to  that. 

Are  IT  people  ready  to  do  real  risk  manage¬ 
ment?  There  is  a  class  of  person  who  is 
reluctant  to  open  this  book.  They  know 
it  will  tell  them  about  managing  uncer¬ 
tainty  in  a  reasonable  way,  and  a  lot  of 
people  don’t  want  to  hear  that.  It’s  like 
going  for  a  colonoscopy.  You  know  it’s 
good  for  you,  but  you  keep  putting  it 
off  because  you  don’t  want  to  face  the 
possibility  of  bad  news.  ©  47618 


THE  ONUS  OF  UNCERTAINTY 


CORPORATE  CULTURE  -  whatever 
that  means  -  poses  serious  challenges 
to  the  would-be  risk  manager.  The  most 
important  of  these  is  an  attitude  toward 
uncertainty,  summed  up  as  follows:  It’s 
OK  to  be  wrong,  but  not  OK  to  be  uncer¬ 
tain.  If  that  rule  describes  your  company, 
you’re  sunk. 

The  rule  says  you  may  miss  your 
promised  delivery  date,  but  in  the 
months  and  days  leading  up  to  that 
date,  you’re  not  allowed  to  express  any 
doubt  that  you  will  indeed  deliver  on 
time.  Failure  is  tolerated  as  long  as  you 
don’t  commit  the  capital  crime  of  admit¬ 
ting  beforehand  that  you  might  fail. 

This  constraint  may  leave  you  prone 
to  an  infectious  disorder  called  selective 
myopia.  Projects  that  are  stricken  with 
this  condition  can  see  only  small  prob¬ 
lems.  Large  problems  may  loom  directly 
ahead  -  problems  that  would  be  in  the 
center  of  any  healthy  project’s  field  of 
vision  -  but  they  go  completely  unseen. 

People  take  elaborate  care  not  to 
trip  over  the  railroad  ties,  but  nobody 
can  see  the  oncoming  train.  Risks  are 
identified,  a  risk  list  is  published,  risks 
are  reported  on  status  reports,  and 


mitigation  strategies  are  approved. 

Risks  are  monitored  and  tracked.  If  one 
only  reviews  the  risk  lists  and  records, 
it  appears  that  the  project  is  low-risk. 

All  the  risks  enumerated  are  at  the  in¬ 
convenience  or  nuisance  level.  The  risk¬ 
tracking  proceeds  without  variance  until 
the  project  is  suddenly  canceled,  often 
followed  by  a  furious  bone-picking  of 
the  corpse  by  litigation. 
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Fortunately,  there’s  a  vaccine.  At 
the  first  go-round  of  risk  identification, 
vaccinate  everyone  by  naming  all  the 
catastrophic  outcomes  you  can  imag¬ 
ine.  Ask  for  more  catastrophes  from 
the  group.  Speak  the  words  failure,  re¬ 
jection  and  cancellation.  See  whether 
you  can  get  others  to  speak  them 
publicly  as  well.  Now,  work  backward 
from  your  catastrophe  list,  asking  for 
scenarios  that  could  lead  to  each  of  the 
catastrophes.  Take  each  scenario  and 
try  to  describe  the  risk(s)  that  could 
bring  it  about.  Now  you  have  the  begin¬ 
nings  of  a  risk  list  that  might  reflect 
future  reality. 

The  essence  of  the  technique  is  this: 
Attack  your  nightmares,  not  your  petty 
worries;  to  discover  the  risks  that  really 
matter  to  your  project,  trace  backward 
from  effect  to  cause.  Watch  for  oncom¬ 
ing  trains.  I 

Adapted  from  Waltzing  With 
ears,  pp.  42-45,  by  permission 
of  Dorset  House  Publishing  Co. 
Copyright  2003  by  Tom  De¬ 
Marco  and  Timothy  Lister. 

All  rights  reserved. 


What  are  some  of  the  benefits  of  good  risk 
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Companies  need  different 
types  of  innovation  sup¬ 
port  from  IT,  depending 
on  what  stage  they’re  in. 


New  ideas  come  in 
many  forms,  from  the 
disruptive  innovation  of 
the  first  PCs  to  the  busi¬ 
ness  model  innovation  of 
Dell’s  decision  to  bypass 
the  retail  channel  and 
sell  directly  to  con¬ 
sumers.  In  the  July  issue 
of  Harvard  Business  Re¬ 
view,  Geoffrey  A.  Moore 
says  the  way  to  get  more 
bang  for  your  innovation  buck  is  to  look 
at  how  any  market  evolves  throughout 
its  life  cycle  and  tie  your  innovation  ef¬ 
forts  to  that  evolution.  Moore,  a  manag¬ 
ing  director  ofTCG  Advisors  LLC  in  San 
Mateo,  Calif,  told  Computerworld’s 
Kathleen  Melymuka  that  the  challenge 
for  IT  is  to  support  those  evolving  efforts 
with  appropriate  technology. 

Looking  at  innovation  as  an  evolution  is  fas¬ 
cinating.  What  role  does  IT  play  in  all  this? 

IT  is  an  enabler  of  each  of  these  kinds 
of  innovation.  With  disruptive  and  ap¬ 
plication  innovation,  the  technologies 
that  matter  most  are  about  communi¬ 
cation  and  collaboration.  People  have 
been  talking  about  concurrent  engi¬ 
neering  and  collaboration  problems  for 
20  years,  but  our  clients  say  communi¬ 
cation  and  collaboration  are  still  not 
what  they  want  them  to  be.  IT  has  a 
long  way  to  go  to  be  better  at  those. 

in  product  and  process  innovation,  things 
heat  up.  How  does  the  IT  role  change?  With 
product  and  process  innovation,  where 
companies  are  ramping  up  and  seeing 
hypergrowth,  laying  down  the  trans¬ 
actional  systems  really  matters,  and 
designing  for  scalability  is  a  huge 
issue.  You  don’t  need  IT  to  help  you 
differentiate;  you  need  IT  to  keep  the 
wheels  on  the  car,  and  it’s  vibrating 
madly.  During  this  period,  IT  has  its 
hair  on  fire.  It  gets  very  focused  and 
even  a  bit  siloed  because  at  this  point 
the  functions  in  the  company  that  it 
serves  tend  to  be  siloed. 


How  can  IT  avoid  the  siloing?  During  this 
hypergrowth  phase  you’re  growing  so 
fast  you  may  want  to  talk  across  func¬ 
tions,  but  there’s  no  time  to  talk  to  any¬ 
one.  Companies  and  IT  tend  to  build 
those  silos  that  they  spend  the  rest  of 
their  lives  trying  to  deconstruct,  but 
there’s  no  easy  way  around  it.  That’s 
the  classic  IT  of  the  go-go  years. 

What  happens  after  that?  We’re  not  in  hy¬ 
pergrowth  but  not  in  decline.  We’re  in 
that  indefinitely  elastic  middle  where 
IT  can  be  a  genuine  source  of  differen¬ 
tiation.  You’re  taking  the  costs  out  of 
processes,  and  there’s  a  lot  IT  can  do. 
In  particular,  you’re  trying  to  extract 
resources  out  of  nondifferentiating 
processes  so  you  can  concentrate  on 
the  differentiating  ones.  Outsourcing 
some  of  the  functions  of  the  corpora¬ 


tion  can  be  very  important  here. 

How  does  IT  support  that?  Whenever  you 
outsource,  you  need  great  visibility  and 
control  systems.  IT  has  fallen  behind 
here.  IT  systems  tend  to  be  about  pro¬ 
ductivity  for  in-house  workers.  When 
we  do  the  work,  we’re  not  so  worried 
about  visibility  and  control  because 
management  takes  care  of  that.  But 
now  [with  outsourcing]  it’s  about  visi¬ 
bility  and  control  at  a  distance.  It’s 
really  important  to  put  in  place  service- 
level  agreements  around  outsourced 
functions  that  keep  everyone  apprised. 
Process  control  knowledge  is  typically 
built  into  the  chemical  and  oil  indus¬ 
tries,  but  average  companies  don’t  know 
squat  about  it.  Sure,  we  have  Six  Sigma 
black  belts  running  all  over  companies, 
but  IT  needs  to  develop  software  to  take 


their  place.  That’s  still  in  the  works. 

What  happens  as  the  market  declines?  As 

the  curve  starts  to  decline  and  you 
come  to  business  model  innovation, 
the  old  transaction  systems  will  need 
to  be  reworked.  That’s  going  to  disrupt 
the  heck  out  of  IT,  and  I  don’t  have  an 
easy  answer.  You  may  be  eliminating 
members  of  the  value  chain.  Maybe 
you  no  longer  need  four  companies; 
maybe  you  can  make  do  with  two  or 
one.  When  you  do  that,  IT  systems  be¬ 
come  ground  zero.  Look  at  how  Dell 
disintermediated  the  retail  channels. 
They  did  it  with  IT.  So  value  chain  in¬ 
novation  is  a  big  deal. 

And  at  the  end  of  the  line?  Structural  inno¬ 
vation  is  all  about  merging  companies 
and  merging  IT.  There  must  be  a  place 
in  purgatory  where  that’s  all  you  do, 
because  nobody  likes  the  outcome  and 
everybody  hates  you  for  years.  That’s 
a  place  where  IT  is  really  challenged. 

If  you  have  an  enemy,  this  is  a  great 
assignment  for  him.  O  47712 


This  is  the  latest  in  a  series  of  monthly  discus¬ 
sions  with  Harvard  Business  Review  authors 
on  topics  of  interest  to  IT  managers. 


Application:  Takes  existing  technologies 
into  new  markets  to  serve  new  proposes. 


Product:  Takes  established  products  in 
established  markets  to  the  next  level 


Tandem  applies  fault-tolerant  com¬ 
puters  to  banking  to  create  ATMs. 


Niche:  Technology  is  gaining  acceptance  among  prag¬ 
matists  in  a  niche  market  where  it  solves  a  problem. 


Process:  Improves  effectiveness  or 
efficiency  of  processes  or  products  in 
established  markets. 


Intel  releases  a  new  processor. 


Charles  Schwab  migrates 
to  online  trading. 


Experiential:  Improves  customer  experi-  FedEx  offers  package  tracking, 

ence  of  established  products  or  process¬ 
es  through  surface  modifications. 


Marketing:  Improves  customer¬ 
touching  processes. 

Business  model:  Reframes  an 
established  value  proposition. 


Amazon.com  develops 
e-commerce  mechanisms. 


Structural:  Capitalizes  on  disruption  to 
restructure  industry  relationships 


IBM  shifts  to  on-demand 
computing. 


Fidelity  uses  deregulation  of 
financial  services  to  offer  a  broader 
array  of  products  and  services. 


Adoption:  Technology  is  perceived  as 
necessary  and  standard  for  many  applications. 
Revenue  soars;  competition  heats  up. 

Early  mainstream:  Hypergrowth  subsides  but 
growth  continues.  Market  share  stabilizes.  Cus¬ 
tomers  expect  and  reward  systematic  improvements. 

Mature:  Growth  flattens;  commoditization 
increases.  Customers  take  product  for  granted, 
but  no  threatening  technologies  are  on  the  horizon. 


Declining:  Product  category  has  become  ossified 
and  unresponsive  to  customer  needs.  Customers 
seek  relief,  and  threatening  new  technologies 
are  beginning  to  appear.  The  market  is  ripe 
for  some  form  of  disruption,  whether  through  a 
new  technology  that  will  render  this  one  obso¬ 
lete  or  a  radically  innovative  business  model. 
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WHAT  EMPLOYERS  WANT 

During  an  IT  job  interview, 
focus  on  the  following: 

How  you  saved  a  faltering 
project  or  product. 

How  you  handled  a  special 
assignment  outside  of  your 
official  job. 

How  you  identified  and 
solved  problems  that  had 
been  previously  overlooked. 

How  you  saved  the 
company  money. 


SOURCE:  CAREER  GUIDE  FOR  THE  HIGH- 
TECH  PROFESSIONAL:  WHERE  THE  JOBS 
ARE  NOW  AND  HOW  TO  LAND  THEM 
(CAREER  PRESS  INC.,  2004) 

Sleepless  In . . . 

■  BRITAIN:  One  out  of  three  IT 
directors  is  working  between 

48  and  60  hours  a  week. 

■  FRANCE:  3%  of  IT  directors 
are  working  more  than  60 

hours  a  week. 

■  GERMANY:  2%  of  IT  direc¬ 
tors  put  in  the  equivalent  of 

7.5  working  days  a  week. 

SOURCE:  2004  RESEARCH  CONDUCTED 
JOINTLY  BY  MERCURY  INTERACTIVE  CORP. 
AND  THE  MANCHESTER  BUSINESS  SCHOOL 


j  What’s  on  Your  Nightstand? 

FORMER  PRESIDENT  BILL  CLINTON'S  new  autobiography.  My  Life,  is 
this  summer’s  must-read  for  executives,  according  to  a  June  survey  of 
business  and  IT  executives  conducted  by  the  Association  of  Executive 
Search  Consultants  in  New  York.  Of  174  executives  polled,  36% 

said  they  would  be  reading  Clinton’s  book  this  summer. 

L. - ___l 

■  Other  top  titles  include  Alexander  Hamilton,  by  Ron  Chernow;  Trump: 

How  To  Get  Rich,  by  Donald  Trump  with  Meredith  Mclver;  Can  You  Keep  a 
Secret?,  by  Sophie  Kinsella;  and  Automatic  Millionaire,  by  David  Bach. 


Location, 

Location . . . 

Forget  who  moved  your  IT 
job.  The  latest  issue  is  where 
it  went.  According  to  the  U.S. 
Department  of  Labor’s  most 
recent  numbers,  the  vast  ma¬ 
jority  of  IT  and  other  jobs  lost 
to  outsourcing  stay  within  the 
U.S.  Of  the  239,361  jobs  lost 
in  large-scale  layoffs  during 
the  first  quarter  of  2004, 
only  4,633  actually  moved 
overseas,  according  to  the 
department’s  Bureau  of  Labor 
Statistics. 

Meanwhile,  a  recent  survey 
of  275  finance  executives 
conducted  by  CFO  magazine 
found  that  companies  have 
moved  an  average  of  6%  of 
their  workforces  overseas 
during  the  past  three  years. 
But  clearly  that  number  will 
grow,  with  64%  of  compa¬ 
nies  that  already  outsource 
reporting  plans  to  use  more 
overseas  workers  in  the  next 
two  years. 

-  Julia  King 


David  Perry 

TITLE  Founder 
and  president 

COMPANY: 

Perry- Martel 
International, 
Ottawa 

UQCH  Can  you  make 
me  money? 

Can  you  save  me  money?  Can 
you  increase  my  efficiency? 
These  are  the  only  three  things 
today’s  employers  are  i  nterest¬ 
ed  in  when  it  comes  to  hiring  IT 
professionals.  So  says  author 
and  longtime  IT  recruiter  David 
Perry  in  his  new  book,  Career 
Guide  for  the  High-Tech  Profes¬ 
sional:  Where  the  Jobs  Are  Now 
And  How  to  Land  Them  (Career 
Press  Inc.,  2004). 


Making  yourself  relevant  to  an  employer’s 
needs  is  what  will  get  you  noticed  and  hired, 
Perry  says.  IT  job  candidates  need  to  think 
about  their  own  accomplishments  with  their 
potential  employer's  requirements  in  mind. 
“As  a  job  seeker,  you  need  to  become  adept 
at  direct  self-promotion  to  executives  and 
to  showcase  your  answer  to  this  question: 
‘How  can  I  increase  shareholder  value?’  ”  he 
writes.  Perry  recently  spoke  with  Computer- 
world's  Julia  King  about  the  challenges  of 
finding  an  IT  job  today. 


What’s  your  advice  to  IT  workers  who 
have  been  laid  off  or  whose  jobs  have 


been  outsourced?  How  should  they  be 
selling  themselves  in  today’s  IT  job 
market?  It's  about  taking  charge  of  your 
career  and  your  life.  If  you've  been  in  the 
high-tech  industry  for  the  past  15  years  or 
so,  up  until  2001,  there  was  always  some¬ 
body  like  me  on  every  corner  saying,  “Hey, 
do  you  want  a  job?”  We  have  a  whole  gener¬ 
ation  of  people  who  don’t  know  how  to  go 
and  ferret  out  their  own  opportunities.  You 
need  to  start  by  figuring  out  what  skill  sets 
you  have  that  employers  are  most  likely  to 
pay  for,  what  industries  you’re  interested  in 
and  then  do  a  Google  search.  By  doing  a 
Google  search  by  job  title,  industry,  area 
code,  geographic  location,  etc.,  you’ll  get  to 
80%  of  the  job  opportunities  out  there.  Go¬ 
ing  through  IT  job  boards,  you’ll  maybe  get 
to  2%  of  the  opportunities  out  there. 

And  then  what?  Figure  out  who  the  peo¬ 
ple  are  with  the  responsibility  for  actually  hir¬ 
ing  you.  Find  something  intelligent  to  say  to 
these  people,  and  then  go  after  them  in  a  di¬ 
rect  manner.  Typically,  it's  a  VP.  Do  a  search 
for  quotes  from  them  in  business  articles  or 
find  any  white  papers  they’ve  written  and 
read  them.  Find  the  person’s  e-mail  address 
and  send  them  a  note  saying  you  read  their 
white  paper  and  get  a  discussion  going.  All 
of  a  sudden,  you’re  no  longer  looking  for  a 
job,  but  you’re  having  a  business  discussion. 
For  so  many  people  looking  for  an  IT  job, 
that  is  so  far  out  of  the  realm  of  what  they’ve 
been  taught  to  do. 

What  are  the  top  three  mistakes  you 
see  IT  job  candidates  make  today? 

Sending  their  rdsumb  to  personnel.  Sending 
their  rdsumd  to  personnel  and  sending  their 
rdsumd  to  personnel.  ©  47820 


Unplug  the  Jam  Cam 


The  U.S.  House  Appropriations  Committee 
has  voted  to  withhold  $5  million  from  the  bud¬ 
gets  of  the  departments  of  Commerce,  Jus¬ 
tice  and  State  until  the  federal  agencies  can 
prove  that  all  eligible  workers  are  permitted  to 


telecommute.  The  2005  appropriations  bill 
also  requires  the  federal  judiciary,  the  Small 
Business  Administration  and  the  Securities 
and  Exchange  Commission  to  prove  that  eligi¬ 
ble  employees  are  permitted  to  telecommute. 


»With  all  of  the  advances  in  technology  today, 
there’s  just  no  reason  to  strap  yourself  into  a 
metal  box  every  morning  just  to  drive  to  an  office 
where  you  sit  in  front  of  a  computer  all  day.  Off- 
the-shelf  technology  even  allows  for  face-to-face 
meetings  via  videoconferencing.  So  not  being  able 
to  talk  -  or  see  -  co-workers  on  a  regular  basis  is 
no  longer  an  issue. 

REP.  FRANK  WOLF  (R-VA),  CHAIRMAN.  COMMERCE-JUSTICE-STATE  APPROPRIATIONS  SUBCOMMITTEE 


Got  Questions  About 
Network  Consolidation? 


Computerworld’s  IT  Executive  Summit  Has  the  Answers 


If  you’re  an  IT  executive*  in  an  end-user 
organization,  apply  to  attend  Computerworld’s 
upcoming  complimentary  half-day  summit 
on  Network  Consolidation. 

CIOs  and  senior  IT  executives  are  finding  that 
consolidating  high-performance  networks  can 
play  a  key  role  in  improving  business  applica¬ 
tion  performance  while  significantly  reducing 
operational  costs. 


Streamlining  Networks  and  Data  Centers: 
The  Business  Benefits  of  Consolidation 

San  Francisco  •  August  5,  2004 

San  Francisco  Four  Seasons  Hotel  •  757  Market  Street 

7:45am  to  8:15am  Registration  and  Networking  Breakfast 

8:15am  to  8:45am  Rebuilding  the  IT  Foundation 

Maryfran  Johnson,  Editor  in  Chief,  Computerworld 


The  proliferation  of  network  capacity  and  relat-  8:45am  to  9:15am 

ed  storage  and  server  infrastructure  presents  a 

daunting  challenge  for  today’s  enterprises, 

many  of  which  are  positioning  themselves  for 

growth  yet  still  seeking  to  reduce  IT  costs 

where  feasible.  9:15am  to  9:45am 


Consolidation  and  the  Data  Center: 
Boosting  Business  Performance 
and  Application  Availability 

Matt  Eastwood,  Research  Director,  Global  Enterprise 
Server  Solutions,  IDC 

Perspectives  from  a  CIO 


Selected 

speakers 

include: 


LI 

Maryfran  Johnson 
Editor  in  Chief, 
Computerworld 


Matt  Eastwood 
Research  Director, 
Global  Enterprise 
Server  Solutions, 
IDC 


•  • 


COMPUTERWORLD 

IT  EXECUTIVE  SUMMIT 

NETWORK  CONSOLIDATION 


This  program  will  also  take  place  in:  Chicago  •  August  25,  2004 

Dallas  •  September  22,  2004 

For  more  information  on  these  locations,  call  888-299-0155 


By  leveraging  the  knowledge  of  industry 
experts  and  the  real-world  experience  and 
advice  of  your  IT  peers,  this  IT  Executive 
Summit  will  provide  an  overview  of  effective 
strategies  for  consolidating  and  connecting 
networks  and  data  center  applications. 

*  Complimentary  registration  is  restricted  to 
qualified  IT  executives  only. 


9:45am  to  10:15am 
10:15am  to  10:45am 

10:45am  to  11:15am 


Refreshment  and  Networking  Break 

User  Case  Study 

Alejandro  Lopez,  System  Architect,  University  of  California 
Davis  Medical  Center 

Customer  Challenges  and  Solutions: 
Real-Life  Scenarios  Connecting  Data 
Centers  Over  Distance 

Steve  Adolph,  CTO,  Enterprise  Solutions  Group,  CIENA 


Steve  Adolph 
CTO,  Enterprise 
Solutions  Group 
CIENA 


Apply  for  registration  today 

For  more  information  or  to  apply,  visit 
www.itexecutivesummit.com/nc 


11:15am  to  noon 


Noon 


Program  Concludes 


Panel:  Overcoming  Management  Barriers  — 
Making  the  Case  for  Consolidation 

Panel  Moderator:  Maryfran  Johnson,  Editor  in  Chief, 
Computerworld 

Panelists:  Joe  Puglisi,  CIO,  EMCOR;  Stephen  Morin,  CIO, 
TAC  Worldwide:  Frank  Enfanto,  Vice  President,  Operations 
Delivery  &  Information  Security,  Blue  Cross  Blue  Shield  of 
Massachusetts;  Alejandro  Lopez,  System  Architect, 
University  of  California  Davis  Medical  Center 


Joe  Puglisi 

CIO, 

EMCOR 


Exclusively  sponsored  by: 


CIENA 
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Capgemini  Targets 
Energy  Sector 

Capgemini  Energy  LP,  a  collabo¬ 
rative  venture  of  Capgemini 
America  Inc.  and  TXU  Corp.  and 
its  subsidiaries,  began  operations 
in  Dallas  as  part  of  a  10-year  deal 
to  provide  IT,  call  center  and 
business  services  initially  to  TXU 
and,  later,  to  other  energy  com¬ 
panies.  Bob  Pryor,  who  previously 
served  for  four  years  as  North 
American  president  of  outsourc¬ 
ing  services  at  Capgemini,  will 
serve  as  CEO.  Elizabeth  Lavalley, 
who  most  recently  served  as 
Dallas-based  TXU’s  senior  vice 
president  of  IT,  will  join  the  limit¬ 
ed  partnership  as  chief  operating 
officer. 


CSC,  Cinergy  Sign 
IT  Services  Deal 

Computer  Sciences  Corp.  an¬ 
nounced  that  it  has  signed  a  five- 
year,  $71  million  IT  application 
services  agreement  with  Cinergy 
Services  Inc.,  the  administrative 
arm  of  Cinergy  Corp.,  a  Cincin¬ 
nati-based  power  provider.  El 
Segundo,  Calif.-based  CSC  will 
provide  application  development 
and  support  for  noncore  func¬ 
tions.  Cinergy  will  retain  applica¬ 
tion  work  related  to  mission-criti¬ 
cal  company  programs.  CSC  has 
conducted  project  work  for  Ciner¬ 
gy  for  15  years  in  areas  such  as 
application  development,  systems 
integration  and  supply  chain 
management. 


CIO,  CTO  Quit  Citrix 

Fort  Lauderdale,  Fla.-based  Citrix 
Systems  Inc.  announced  that 
Jeanne  M.  Moreno,  senior  vice 
president  of  corporate  services 
and  CIO,  and  Bob  Kruger,  senior 
vice  president  of  product  develop¬ 
ment  and  chief  technology  officer, 
have  decided  to  leave  the  compa¬ 
ny.  Citrix  also  announced  that  it 
will  reorganize  the  corporate  ser¬ 
vices  unit,  including  IT,  facilities, 
purchasing  and  manufacturing. 
The  unit  will  be  integrated  into 
the  finance  and  administration 
organization  under  Chief  Finan¬ 
cial  Officer  David  Henshall. 


BART  PERKINS 


MANY  COMPANIES  feel  that  their  IT  or¬ 
ganizations  are  “broken”  or  irrepara¬ 
bly  damaged,  and  indeed,  some  are. 
The  symptoms  of  a  damaged  IT  orga¬ 
nization  are  all  too  familiar:  failed 
projects,  big  write-offs,  high  CIO  turnover,  an  outdated 
technology  base  and  uninvolved  executives  telling  the 
latest  CIO,  “Call  me  when  the  problems  are  fixed.” 
These  companies  are  often  tempted  to  succumb  to  the 
siren  song  of  the  outsourcers  who  offer  to  take  over  all 
of  IT  and  promise  to  fix  it. 

However,  companies  that 


expect  to  leverage  an  out¬ 
sourcer’s  expertise  in  this 
manner  usually  find  that 
their  costs  increase  dra¬ 
matically.  In  addition,  the 
outsourcer  often  requires 
numerous  changes  to  cor¬ 
porate  business  processes, 
some  of  which  may  be  un¬ 
acceptable. 

When  an  IT  organization 
is  badly  damaged,  out¬ 
sourcing  the  whole  thing  is 
truly  tempting,  but  such  a 
desire  often  means  “Let’s 
abdicate  all  responsibility 
for  IT.”  Such  endeavors  can 
be  classified  as  “despera¬ 
tion  outsourcing”  and 
rarely  succeed.  Outsourcing  IT  can  be 
successful,  but  not  when  the  organiza¬ 
tion  is  damaged.  Fix  the  problems 
First,  then  revisit  outsourcing  options. 

Like  the  damaged  arm  of  a  starfish, 
the  failed  IT  organization  needs  to  be 
regenerated,  not  amputated.  Success¬ 
ful  regeneration  efforts  require  a 
strong  CIO  who  will  say  “no”  loudly 
and  clearly  when  needed,  even  if  it 
makes  powerful  executives  unhappy. 

Regeneration  efforts  aren’t  a  popu¬ 
larity  contest.  The  leadership  role  is 
generally  best  performed  by  an  OOTA 
(out  of  town  agitator),  a  specialist 
from  outside  the  corporation.  The 
OOTA  is  hired  as  CIO  to  focus  solely 


BART  PERKINS  is 

managing  partner  at 
Leverage  Partners  Inc. 
in  Louisville,  Ky.,  which 
helps  CIOs  manage 
their  IT  suppliers.  He 
was  CIO  at  Tricon 
Global  Restaurants  Inc. 
and  Dole  Food  Co. 

Contact  him  at 
BartPerkins@Leverage 
Partners.com. 


on  successful  regeneration, 
which  usually  takes  two  to 
three  years.  When  the  re¬ 
generation  is  complete,  IT 
will  be  turned  over  to  a  new 
CIO  whose  skills  are  better 
suited  to  running  a  stable 
organization.  Make  sure  to 
wait  until  completion  to 
make  this  turnover;  the  two 
CIOs  aren’t  interchange¬ 
able,  since  they  have  widely 
different  skill  sets.  Switch¬ 
ing  too  soon  can  undo 
everything  that’s  been  ac¬ 
complished  to  date  without 
reaping  the  full  benefits  of 
the  regeneration  effort. 

Yes,  the  right  OOTA  can 
be  expensive,  but  not  as  ex¬ 
pensive  as  outsourcing  your  whole  IT 
organization,  and  certainly  not  as  ex¬ 
pensive  as  outsourcing  IT,  failing  and 
then  having  to  bring  it  back  in-house. 

A  firm  foundation  for  successful  re¬ 
generation  also  includes  the  following 
requirements: 

■  Executive  buy-in.  IT  isn’t  a  spectator 
sport.  The  other  CxOs  need  to  actively 
support  the  regeneration  effort.  Most 
new  IT  systems  require  changes  to  the 
underlying  business  processes,  partic¬ 
ularly  when  replacing  outdated  sys¬ 
tems.  Midlevel  managers  who  prefer 
the  status  quo  must  not  be  allowed  to 
withhold  their  cooperation  or  ignore 
or  undermine  the  efforts  of  the  re¬ 


generation  team. 

■  Sufficient  time.  Problems  that  took 
many  years  to  develop  require  sub¬ 
stantial  time  to  correct  —  usually  mea¬ 
sured  in  years,  not  months.  Unfortu¬ 
nately,  there  are  no  silver  bullets. 

■  The  right  team.  Regeneration  isn’t 
sexy,  but  don’t  be  tempted  to  put  a  sec¬ 
ond-level  team  on  it.  Regeneration  re¬ 
quires  a  talented,  focused  and  dedicat¬ 
ed  team,  and  prior  regeneration  expe¬ 
rience  is  invaluable.  While  the  team 
may  Find  it  helpful  to  supplement  ex¬ 
isting  staff  with  experienced  consul¬ 
tants,  the  internal  members  must  be 
held  responsible  for  the  final  results. 

■  Stability.  Make  any  needed  staffing 
changes  at  the  start.  Changing  leader¬ 
ship  or  key  employees  midstream  will 
almost  certainly  derail  the  effort. 

■  Focus  and  execution.  Start  regenera¬ 
tion  with  a  clear,  well-thought-out 
plan.  Then  focus  ruthlessly  on  deliver¬ 
ing  against  that  plan.  When  an  IT  or¬ 
ganization  hasn’t  delivered  for  several 
years,  there  is  inevitably  pent-up  de¬ 
mand  for  IT  services.  When  the  rest  of 
the  corporation  realizes  that  the  IT  or¬ 
ganization  may  be  productive  again, 
demand  will  be  enormous.  But  the 
CIO  must  delay  most  new  projects  un¬ 
til  regeneration  nears  completion.  Un¬ 
dertaking  unanticipated  projects  can 
severely  hamper  regeneration  success. 

Although  it’s  tempting  to  believe 
that  outsourcing  a  broken  IT  organiza¬ 
tion  will  magically  fix  it,  this  “out  of 
sight,  out  of  mind”  approach  usually 
spells  disaster.  When  your  IT  organi¬ 
zation  is  damaged,  don’t  succumb  to 
desperation  outsourcing.  Instead,  take 
your  cue  from  the  starfish  at  the  bot¬ 
tom  of  the  ocean  to  make  sure  your  IT 
organization  doesn’t  end  up  at  the  bot¬ 
tom  of  the  Dumpster.  ©  47773 

MORE  ONUNE 

IT  Turnarounds:  Is  your  IT  shop  chaotic,  unfocused  or 
demoralized?  Here's  a  road  map  for  fixing  such  problems: 

QuickLink  41369 
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IT  Careers:  Leaders  of  Top  Education  Programs  Look  to  Future 


The  leaders  of  the  nation's  top  computer  science/software  engineering 
degree  programs  agree  on  two  things  about  preparing  the  IT  workforce 
of  the  future.  First,  they  need  to  attract  more  people  to  the  technical 
professions.  Second,  the  breadth  and  dexterity  of  what  is  covered  in 
lifelong  learning  continues  to  grow. 

U.S.  News  &  World  Report  rated  Rose-Hultman  Institute  of  Technology,  Cal- 
Poly  (San  Luis  Obispo)  and  The  Cooper  Union  as  the  top  three  institutions 
for  undergraduate  computer  engineering. 

Dr.  George  Campbell,  president  of  The  Cooper  Union  for  Advancement  of 
Science  and  Art  in  New  York  City,  looks  at  the  issue  of  technology 
education  from  two  perspectives  -  in  his  current  role  as  an  academic 
leader  and  his  previous  role  as  CEO  of  NACME,  a  non-profit  devoted  to 
science  and  technology  education  and  policy.  "The  most  significant 
deficiency  we  have  been  unable  to  overcome  is  under-representation  of 
women  and  minorities"  in  technical  studies,  Campbell  says.  "In  the  past  we  have  filled  the 
workforce  needs  by  bringing  technology  workers  into  this  country.  This  is  no  longer 
working.  Other  countries  are  investing  a  greater  proportion  of  their  gross  national  product 
in  the  education  of  their  own  technical  workforce." 

Cooper  Union's  situation  is  highly  unique;  the  institution  has  1,000  students,  100%  of 
whom  are  on  full  tuition  scholarships.  Approximately  32%  of  the  students  are  female.  The 
number  is  higher  than  the  nationwide  average  of  women  in  technology  (23%).  However, 
the  number  of  African-Americans,  Latinos  and  American  Indians  enrolled  in  technology 
courses  nationwide  remains  in  low  double-digit  figures.  Campbell  believes  change  will 
occur  only  through  intervention  at  earlier  ages  to  attract  children  from  inner  city  schools. 

While  demographics  and  numbers  are  critical,  given  that  the  vast  majority  of  higher  paying 
jobs  is  in  the  technology  areas,  so  too  is  the  breadth  of  studies  undertaken.  According  to 
Campbell,  "Most  of  the  technology  advances  that  took  place  in  the  20th 
century  resulted  from  major  breakthroughs  in  physical  sciences  -  quantum  mechanics,  solid 
state  physics,  chemistry  and  so  on,"  Campbell  explains.  "In  the  future,  more  advances  in 


technology  will  be  driven  by  breakthroughs  and  greater  understanding  of 
processes  in  life  sciences — self  replication,  DNA  and  the  like.  I  believe  all 
engineering  majors  should  have  a  course  in  molecular  cell  biology,  just  as 
physics  and  chemistry  are  required  today." 

In  addition  to  major  shifts  in  curriculum  to  include  life  sciences,  Campbell 
says  educational  programs  have  to  avoid  the  trap  of  relying  on 
simulations  alone  to  help  teach.  "You  really  need  to  understand  the  ideas 
to  comprehend  the  technology  that  is  behind  it,"  he  says. 

Dr.  Cary  Laxer,  head  of  the  software  engineering/computer  science 
program  at  Rose-Hultman  Institute  of  Technology,  says  the  breadth  of 
capabilities  required  also  must  be  addressed.  Rose-Hultman  already  has 
added  courses  in  critical  areas  -  networking,  computer  security  and 
cryptography.  "We've  added  a  required  course  in  technical 
communications,"  Laxer  adds,  "to  make  sure  our  graduates  can 
communicate  with  a  variety  of  constituencies."  Laxer  and  his  peers  at  other  U.S.  universities 
continue  to  assess  the  longer  term  future  of  technology  and  adjust  curricula  accordingly. 
Adding  courses  is  just  one  aspect  of  that  change  -  professional  development  for  faculty 
and  equipment  for  students  also  has  to  be  included. 

The  third  critical  aspect  of  IT  education  is  lifelong  learning,  say  Campbell  and  Laxer.  "This 
isn't  just  a  technical  issue,"  stresses  Campbell.  "There  needs  to  be  a  balance  between 
liberal  arts  and  technology  learning  throughout  life.  This  is  so  important  in  understanding 
the  context  in  which  we  do  science  and  engineering  -  the  ethics,  societal  implications  and 
economic  effects.  These  are  the  things  that  separate  professionals  and  visionary  leaders" 
from  others,  Campbell  adds. 
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DATABASE  ADMINIS¬ 
TRATOR:  sought  by  IT 
co.  in  Houston,  TX. 
Must  have  degree  & 
exp.  Respond  by 
resume  only:  E. 

Pascual,  President 
T/B#10,  Komputer  + 
Peripherals,  Inc.,  11750 
Wilcrest  Dr.,  Houston, 
TX  77099 


itcareers.com  can  solve  the 
labyrinth  of  job  hunting  by 
matching  the  right  IT  skills 
with  the  right  IT  position. 

Find  out  more  at: 
www.itcareers.com 


IT  PROFESSIONALS 
Senior  Consultant 

(Glen  Mills,  PA  and  other  locations  throughout  the  United  States).  Lead  a 
team  of  Siebel  customization  developers  in  a  Siebel  Application  develop¬ 
ment  environment,  specifically  with  Siebel  Actuate  reporting.  Responsible 
for  the  creation  of  project  plans,  level  of  effort  estimation,  finalizing  scope 
of  the  engagement,  resource  allocation  and  prioritization  of  tasks  of  team 
members.  Responsible  for  liaising  with  business  users  to  discuss  imple¬ 
mentation  options  for  reporting  and  presenting  and  review  the  design  and 
prototypes  of  the  proposed  reporting  solutions.  Responsible  for  the  scop¬ 
ing  and  mapping  of  operational  reporting  requirements  to  Actuate  Siebel 
i  reports  with  report  parameters/filters.  Design  and  develop  the  latest  ver¬ 
sions  of  Actuate  Siebel  reports,  and  set  up  scheduling  options,  and  user 
groups  for  security  control  utilizing  the  Actuate  Report  Server,  Customize 
Siebel  enterprise  applications  such  as  Siebel  Sales,  Siebel  Call  Center 
and  Siebel  service  utilizing  Siebel  tools  such  as  Siebel  VB/eScript.  Utilize 
Oracle  SQL  capabilities  for  testing  methods  of  data  transfer  and  storage 
in  the  Siebel  Database  and  for  loading  data  via  Siebel  EIM  for  perfor¬ 
mance  testing  activities. 

The  wage  offered  is  $82, 000/year.  The  work  schedule  is  Monday-Friday 
9:00am-5:00pm  The  minimum  requirements  are  as  follows:  Bachelor's 
degree  or  equivalent  in  Computer  Science,  Engineering  (any),  Business 
Administration,  Information  Systems  or  Mathematics  plus  6  years  experi¬ 
ence  in  the  job  offered  or  6  years  experience  as  a  Manager,  Senior 
Consultant,  Consultant,  Associate  Consultant,  or  Senior  Analyst 
Employer  will  regard  a  foreign  degree  to  be  equivalent  to  a  U.S. 
Bachelor's  degree  as  determined  by  an  accredited  credentials  evaluation 
service.  Related  experience  must  also  include  at  least  2  years  of  Siebel 
Actuate  Reporting,  Siebel  Application  Development  Environment  (Siebel 
Tools)  and  Oracle/SQL. 

Please  send  your  resume,  referencing  Job  Order  Number  WEB  433177 
to  the:  PACareerLink,  FLC  Unit,  235  W.  Chelten  Avenue,  Philadelphia.  PA 
19144,  EOE. 


BCC  USA  Inc.  -  Portland. 
Maine  needs  experienced 
Programmer  Analysts  hav¬ 
ing  a  Bachelors  degree  with 
minimum  two  years  of  pro¬ 
gressive  work  experience  in 
Java,  J2EE,  EJB,  JSP, 
Servlets,  JavaScript,  XML, 
XSL,  MVC,  Struts,  Weblogic 
and  Oracle.  Competitive 
salary  and  benefits.  M-F,  40 
hours/week.  Please  mail 
your  resume  to  BCC  USA 
Inc.,  HR  Department,  650 
Main  Street,  Suite  201, 
South  Portland,  ME  04106. 


BCC  USA  Inc  -  Portland. 
Maine  needs  experienced  Da¬ 
tabase  Administrators  having  a 
Bachelors  degree  with  mini¬ 
mum  two  years  of  progressive 
work  experience  in  design, 
development  and  installation  of 
databases  using  Oracle.  Sy¬ 
base  Developer.  Pro’C,  Perl 
DBI,  Unix.  PL/SQL,  Informati- 
ca,  Autosys  and  Erwin  Com¬ 
petitive  salary  and  benefits.  M- 
F,  40  hours/week.  Please  mail 
your  resume  to  BCC  USA  Inc., 
HR  Department,  650  Main 
Street,  Suite  201,  South 
Portland,  ME  04106. 


"SUCCESS 

join  the  $300  BILLION 

COMPUTER  SERVICE  DUSINESS. 


Find  out  how  you  can  invest  in  one  of 
Entrepreneur  Magazine’s  “HOT  100 
Franchises”,  and  in  a  Franchise  Times 
“FAST  55”  company  Single,  Multi-Units 
and  Area  Development 
Opportunities  are  now  available. 
For  more  information  call 


or  visit  us  at 

geeksoncall.com 


On  Call  America.  Inc. 


e-lite  companies 

e  -  merging  companies 

e-ssential  companies 

e-normous  opportunities 
w  ww.itcareers.com 
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Compuware 

At  Compuware,  you  can  put 
your  IT  experience  to  work  while 
constantly  developing  new  skills. 
We  currently  have  the  following 
nationwide  opportunities: 

•  Business  Analysts 

•  Database  Administrators 

•  Network  Administrators 

•  Product  Sales 

•  Product  Management/Support 

•  Programmers/Analysts 

•  Project  Managers 

•  QA  Analysts 

•  Software  Developers/ 
Engineers 

•  System  Engineers 

•  Technical  Writers 

•  Web  Developers 

•  Recruiting  Manager 
www.compuware.com/careers 

Be  sure  to  indicate  the  specific 
title  and  location  you  are  apply¬ 
ing  for  on  your  application  letter. 
Send  your  resume,  referring  to 
ad  #ITC071204,  to: 

Compuware  Corporation, 
Attention:  Recruiting 
One  Campus  Martius 
Detroit,  Ml  48226.  E-mail: 
ads@compuware.com. 

EOE 


Applied  Optoelectronics,  Inc. 
(Sugar  Land,  TX)  is  seeking  a 
Database  Administrator  using 
Oracle9i,  SQL,  SQL  DTS, 
TransactSQL,  Pervasive  7,  VB, 
PL/SQL,  VMS,  Linux,  UNIX 
scripting,  Tivoli,  EMC  environ¬ 
ment,  Erwin,  and  UML, 
Peoplesoft,  SAP  with  Oracle, 
DB2  and  Sybase.  B.S.  3  mon. 
exp.  Send  resume  to  13111  Jess 
Pirtle  Blvd.,  Sugar  Land,  TX 
77478/281-295-1888  (F).  Attn: 
HR  Manager. 

K.T.J.  Imports  and  Exports,  Inc. 
(Houston,  TX)  is  seeking  a  MIS 
Engineer/MIS  Specialist  using 
knowledge  in  business,  OSAS, 
and  SAP  Data  Warehouse  soft¬ 
ware.  B.S.  6  mon.  exp.  Send 
resume  to  6500  Long  Point  Rd., 
#304,  Houston.  TX  77055/713- 
680-3124(F).  Attn:  Chyryi  Shiau. 
Canspec  Amerasia  Industries, 
Inc.  (Houston,  TX)  is  seeking 
Systems  Programmer.  B.S.  1  yr. 
exp.  using  Microsoft.Net,  ASP, 
VB.Net,  Java,  SQL,  OLAP,  XML, 
GeoFrame,  HRS,  Jason, 
Ergos99,  isis,  Sun  Blade2000, 
Sun  Ultra60,  and  SGI  OCTANE. 
Send  resume  to  8303  S.W. 
Fwy.,  #488,  Houston,  TX 
77074/7 1 3-77 1  -8868(F).  Attn: 
Eric. 


Programmer  Analysts  to  analyze, 
design,  develop  and  support  co¬ 
mputer  systems  using  OS  like 
MVS/ESA,  DOSA/SE,  UNIX,  MS 
-WINDOWS,  databases  such  as 
DB2,  VSAM  and  Oracle,  progra¬ 
mming  environments  such  as  C, 
C++,  COBOL,  COBOL  II,  TSO- 
ISPF,  CICS,  JCL  and  tools  in¬ 
cluding  FILEAID,  IDCAMS,  SQL- 
*PLUS  and  PRO’C;  generate 
batch  reports  from  existing  data 
and  debug  for  better  perfor¬ 
mance.  Require  BS  or  foreign 
equivalent  in  CS  or  any  branch  of 
Engineering  or  related  field  with 
2  yrs  exp  in  IT.  High  salary,  f/t 
position.  Travel  involved.  Resu¬ 
mes  to  HR,  Smartsoft  Interna¬ 
tional,  Inc.,  3965  Johns  Creek 
Court,  Suwanee,  GA  30024. 


IT  SPECIALIST  to  plan,  design, 
implement,  maintain  and  admin¬ 
ister  the  company's  information 
infrastructure,  including  hard¬ 
ware  setup  and  maintenance, 
software  installation,  configura¬ 
tion  and  upgrades;  network 
administration  and  troubleshoot¬ 
ing;  implement,  evaluate  and 
maintain  networked  computer 
hardware  to  meet  user  require¬ 
ment;  design,  develop  and  main¬ 
tain  the  company's  website;  pro¬ 
vide  programming,  design  and 
technical  support  for  users  and 
clients.  Require:  Bachelor’s  de¬ 
gree  in  Computer  Science/ 
Information  Systems.  Competi¬ 
tive  salary  offered.  Mail  resume 
to:  Chief  Manager,  Lalji  Invest¬ 
ors.  LLC,  1351  Dogwood  Dr„ 
Conyers,  GA  30012. 


Partner  Manager,  Latin  America: 
Identify  +  initiate  business  rela¬ 
tionships  with  Latin  American 
third  party  vendors  of  software  + 
database  systems.  Manage  rela¬ 
tionships  with  Latin  American 
vendors.  Supervise  Latin  Ameri¬ 
can  sales  channels  +  marketing 
activities.  Requires  Bachelor's  or 
Equiv.  in  Marketing  or  Business 
Admin.,  plus  4  years  exp.  in  posi¬ 
tion  offered  or  4  years  exp.  as 
Marketing  (Manager/Director), 
Computer  Software.  Requires 
frequent  travel  to  Latin  America; 
4  years  experience  with  Software 
sales  +  marketing  in  Latin  Ameri¬ 
can  markets;  Fluency  (spoken  + 
written)  in  Portuguese  +  Spanish 
languages.  Salary  $90,000  per 
year;  Hours:  8:00  a.m.  -  5:00 
p.m.,  40  hours,  Monday-Friday, 
Job  located  in  Miami,  FL.  Send 
resume  to:  Workforce  Program 
Support,  P.O.  Box  10869, 
Tallahassee,  FL  32302-0869, 
Ref:  JOFL#  2533090. 

Technical  Support  Specialist: 
assign  and  coordinates  work 
projects;  establish  work  priorities 
and  evaluate  cost  and  time 
requirements;  review  and  test 
programs  to  ensure  compliance 
with  specifications  and  stan¬ 
dards;  evaluate  and  test  vendor- 
supplied  software  packages  to 
determine  compatibility  with 
existing  systems;  maintain  com¬ 
pany  network  system  and  web¬ 
site,  process  e-commerce.  Req. 
BS  or  foreign  equivalent  in  CS  or 
IS  w/proficiency  in  SQL,  Intel 
Xeon  &  Itanium  Server  support, 
TCP/IP,  network  HW/SW  instal¬ 
lation,  configuration,  and  trou¬ 
bleshooting.  40hr/wk,  9-5. 
Contact  recruiter  PC  Source, 
Inc.  3004  Adriatic  Court, 
Norcross,  GA  30071. 

Sys  Analyst  to  d/zn,  dev,  impl.  & 
maintain  web  enabled  eComm, 
client-server  &  N-tier  appls.  Per¬ 
form  sys  req  study,  sys  analysis, 
Test  Plan  Preparn,  Unit  Testing, 
Sys  Integrn  Testing  &  Doc.  Dev 
appl  using  Java,  Servlet,  JSP, 
J2EE,  EJB,  HTML,  DHTML,  VB¬ 
Script,  JavaScript,  ASP,  VB6.0, 
COM/DCOM,  VC++.  IIS4.0, 

Weblogic  5. 1/6.0,  SQLServer 
6.0,  Visual  Cafe  3.0,  Visual 
Interdev  6.0,  VSS  6.0,  Solaris  7, 
WebSphere  Appl  Server  4.x/5.x, 
MQSeries,  DB2  7.3/8.1.  AIX  3.4, 
Win  2000,  SOAP  1.1.  ANT, 
JUnit,  Websphere  Studio  Appl 
Developer  4.X/5.X,  JProbe, 
PVCS,  Versata  Logic  Ste  5.5  & 
respon  for  lifecycle  of  s/w  projs. 
24X7  tech  supp.  BS  in  CE  +  2  yr 
exp.  Certified  Java  programmer. 
Comp,  salary.  Apply  to  Unilinx  - 
Code  RB,  4625  Alexander  Dr., 
#110,  Alpharetta,  GA  30022  with 
proof  of  perm.  W/k  authzn. 

Actuate  IT  Technical  Lead,  Wa¬ 
chovia  Securities,  Chicago,  IL. 
Develop,  create  and  modify  com¬ 
puter  appl.  software  using  Actu¬ 
ate  software.  Reqs.  BA  in  Com¬ 
puter  Science  and  4  yrs  exp.  in 
pos.  or  as  Software  Engineer. 
The  4  yrs.  must  incl.  developing 
software  and  web  appl.  solutions 
using  Actuate  software  and  work 
integratingActuate  into  .Net 
appls,  externalizing  security  (w/o 
use  of  LDAP),  developing  usage 
reports  incl.  transient  reports, 
designing  object  oriented  appl.  in 
the  Actuate  framework,  report 
dvlp.,  publ.  tech.  doc.  and  con¬ 
ducting  stress  tests  and  develop¬ 
ing  queries  against  Oracle  and/or 
DB2.  2  yrs.  of  req. exp.  must  incl. 
developing  appls.  using  Micro¬ 
soft's  .Net  framework.  Must  be 
Actuate  certified.  M-F,  8-5,  Send 
resume  to  Geri  Ann  Henderson, 
Wachovia  Corp.,  401  S  Tryon 
Street,  NC  0958,  Charlotte,  NC 
28288-0958.  No  phone  calls. 

Infobahn  Technologies  deliv¬ 
ers  innovative  IT  Solutions 

to  business  clients  nation¬ 
wide.  We  have  immediate 
full  time  opportunities  for 
Programmer  Analysts.  All 
applicants  must  have  a  min¬ 
imum  BS  in  Computer 
Science  Engineering  or  Re¬ 
lated  field  plus  2  years  of 
experience.  Send  resumes 
to:  Infobahn  Technologies, 
(HR)  288  Walnut  St.  #410 
Newton,  MA  02460. 

Requirements  Analyst  need¬ 
ed  at  client  sites  to  gather 
business  reqmts,  analyze  & 
dvlp  scenarios;  prgm  in 
Siebel,  Java,  JSP,  C++,  SQLI/ 
PLSQL;  test  using  Win- 
Runner,  LoadRunner,  Test 
Director;  UML  modeling  using 
CaliberRM;  data  modeling 
using  SAS,  SPSS;  OO  data 
modeling  &  db  dsgn.  Resume 
to:  Global  Consultants,  Attn: 
Hireme,  25  Airport  Rd., 
Morristown,  NJ  07960. 

Manager,  IT.  (Rockleigh, 
NJ).  Reqs  4  yrs  exp  IT 
management,  incl  secure 

databases  &  MBA  or  MPA 

w/undergrad  Comp  Sci, 
Math,  or  Elec  Engineering 
major.  Will  also  accept  4 
yrs  exp  &  MBA  w/IT  core. 
Send  resume:  US  Tender, 

8  King  Rd,  Rockleigh,  NJ 

07647  Attn:  HR/IT. 

Communications  Engineer  - 
Homestead,  FL  -  wanted  by 
telecommunication  &  entertain¬ 
ment  provider.  Monitor  &  trou¬ 
bleshoot  the  uplinking,  downlink¬ 
ing  &  transmissions  of  digital 
voice,  image  &  data  files. 
Monitor  &  troubleshoot  the  inter¬ 
connectivity  of  satellite  to  fiber 
optic/fiber  optic  to  satellite  hard¬ 
ware.  Troubleshoot  reception  & 
amplification  issues  during 
transmissions.  B.S  Electronics  & 
Communications  Eng  or  foreign 
equivalence  &  2  yr  exp.  in  job 
offered.  Fax  resume  to  Satuple, 
Inc.  attn:  Human  Resources  at 
305-247-8011. 

MPHASIS  CORPORATION 
Has  multiple  openings  for  the 
following  positions  at  its  offices 
in  New  York,  NY,  Memphis,  TN, 
Houston,  TX,  San  Mateo,  CA 
and  unanticipated  client  sites 
throughout  the  U.S.:  Prog¬ 
rammer  Analyst,  Software 
Engineer,  Project  Manager, 
Management  Analyst,  Sales 
Engineer,  Business  Develop¬ 
ment  Manager,  Finance 

Manager.  Please  send  resume, 
salary  history  and  position 
applied  for  to:  460  Park  Avenue 
South.  Suite  #1101,  New  York, 
NY  10016,  Attn:  H.R.  Manager 

North  East  Fasteners,  Inc.  is 
looking  for  systems  devel¬ 
opers  to  define  and  design 
page  architecture  and  navi¬ 
gation  models;  develop  data 
models  and  databases;  and 
administer  databases.  Must 
have  at  least  bachelors  de¬ 
gree  in  computer  engineer¬ 
ing  or  related  major.  Please 
send  all  resumes  to  North 
East  Fasteners,  Inc.  8 
Tremco  Dr.,  Terryville,  CT 
06786,  attn.:  Human  Re¬ 
source  Department. 
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Computer  Support  Specialist 
to  support  computing  infra¬ 
structure  including  servers, 
email,  apps,  network,  dbs  & 
users.  Requires  MS  in  Comp 
Sci  &  min  2  yrs  exp  w/Novell, 
Solaris,  Linux  &  MS  Windows 
systems,  LAN/WAN  network¬ 
ing,  web  server  &  SQL  server; 
familiarity  w/Visual  Basic, 
Oracle,  .Net,  XML  &  ASP 
required.  Send  resume  to 
Human  Resources,  Sunrise 
Global  Inc.,  4000  Bordentown 
Ave.,  Sayreville,  NJ  08872,  or 
fax  to  732-651-9998. 


Software  QA  Eng  IV,  Team 
Leader  -  Est.  overall  test  auto¬ 
mation  direction  for  one  or  mult, 
product  lines,  automate  func¬ 
tional  &  scalability  test  scenar¬ 
ios.  Review  project  req's,  tech, 
documentation,  define  project 
test  strategy.  Review  &  define 
test  case  docs.  Track  defects  & 
approve  project  release.  Train/ 
supervise  junior  team  members. 
REQ:  BA/BS  CIS/IT/Eng,  8  yrs 
as  SQAE,  5  yrs  test  automation 
exp,  3  yrs  DB  testing  exp,  3  yrs 
automated  performance  &  seal- 
ability  testing  w /  comm'l  perf  test 
tool,  project  mgmt  exp.  2  pos 
avail.  Resume:  m013_04@ 
onesource.com.  OneSource  is 
an  Equal  Oppty  Employer. 


Software  Engineer 

Seeking  individual  with  experi¬ 
ence  working  with  application 
servers  (ATG  Dynamo  4.1/  5.1), 
operating  systems  (Windows 
NT,  Sun  Solaris,  UNIX,  Net¬ 
ware),  programming  languages 
(Visual  Basic,  JAVA,  ASP, 
COBOL,  C),  software  configura¬ 
tion  tools  (Rational  ClearCase 
3.2.1),  and  effective  communi¬ 
cation  skills.  Must  have  BS,  5 
years  experience  as  software 
engineer,  Sun  Certified  Java 
Programmer,  and  significant 
experience  programming.  Sal¬ 
ary  $55,000.  Send  resume  and 
cover  letter  outlining  minimum 
qualifications  to  Provion,  1501 
Commerce  Ave.,  Carlisle,  PA 
17013. 


Computers  -  Development  Man¬ 
agers  needed.  Seeking  qual. 
candidates  possessing  MS  or 
equiv.  and/or  rel.  work  exp.  Part 
of  the  req.  rel.  exp.  must  include 
3  yrs.  working  with  Java.  Duties 
include:  Design,  develop  & 
implement  software  systems  & 
applications;  Monitor  &  coordi¬ 
nate  software  systems  using 
development  &  integration.  Fwd. 
resume  &  ref.  to:  Globecom 
Software,  Attn:  HR,  1702  N. 
Fairmount  St.  #101,  Wichita,  KS 
67208. 


Cigniti  has  openings  for  System 
Analysts  or  Software  Engineers. 
Candidates  must  have  BS/MS 
with  experience.  Use  skills  such 
as  Java,  Cobol,  EJB,  ERP, 
Oracle,  SQL,  VB,  C/C++.  Travel 
may  be  required  for  some  jobs. 
Competitive  salary.  Please  apply 
at  info@cioniti.com.  No  calls. 
EOE. 

IT  specialists  wanted  by  AR- 
WANO,  Inc.  for  positions  using 
Oracle,  SQL,  VB,  C/C++,  SAP, 
AS/400,  RPGLE,  COBOL/  400, 
CL,  SQL/400,  Query/400,  Or¬ 
acle  RDBMS,  Developer  2000, 
Windows  NT.  Minimum  is  BS 
degree  with  IT  exp.  Travel 
maybe  required.  Please  apply  at 
waseem@arwano.com.  EOE. 


Applications  Engineer 
required  by  Hayward,  CA, 
based  chain  of  shoe  retail¬ 
ers.  Requires  Bachelor’s 
degree  in  any  engineering 
field.  Must  be  knowledge¬ 
able  in  code  development, 
Java  1.2  and  2.0,  and  Java 
with  Oracle  databases  for 
web  based  projects.  Send 
resume  to  Rosa  Rahemi, 
VP  of  Finance,  Sheikh 
Shoes,  2247  Commerce 
Place,  Hayward,  CA  94545. 


[Careers.com 


On*  tC*»U>  KfMI-MDti' 

,  Canw.Ioumd.i-om 


it  careers 


SAURY 

SURVEY 

i  Ml] 

BEST  PUCfS 


Ar>  lO(?R*r:«  li'.rr>*r.v  LVArtiuwj;  Co»n^*nY 

find  a  job  •  features  &  tips  ♦  post  a  job  ♦  advertiser  tools 

.  fXXWSMp  •» 


.  Search  for  j 


O  m  descnpnorw  O  In  tiles  O  Fi4  sewcli 


minor  jmxxS 


Welcome  to  IT  Careers 


find  a  job  |  employers  j  features  &  tips 

find  a  job 

The  IT  Careers  Network  uses  Ihe  power  of  The  Wall 
Street  Journals  CareerJournal  jobs  database  to  bring 
you  the  largest  concentration  of  IT  jobs  available  Get 
e-mail  notifications  when  new  jobs  match  your 
search  criteria  Post  an  online  resume  and  more 

•  search  jobs 

•  create  a  Job  Alert 

•  edit  a  Job  Alert 

•  post  a  resume 

•  edit  your  resume 


features  &  tips 

Gather  the  best  IT  career- related  information, 
features,  news  and  tips  from  some  of  the  best 
sources  in  the  industry  They  bring  readers  regular 
items  such  as  opinions  and  advice  from  industry 
experts,  special  packages  and  supplements  on 
career  trends,  salaries,  contracting,  hiring  and 
retention  issues 
•  Computerworfd 


post  a  job 

Finding  the  right  IT  professionals  to  fill  your  available 
positions  can  be  a  challenging  and  time-consuming 
effort  fT  Careers  can  help  With  the  2.2  million 
unique  visitors  each  month,  the  online  services  that 
are  available  through  IT  Careers  is  a  smart  way  to 
deliver  and  job  posting 

•  post  jobs 

•  search  resumes 

•  become  a  Featured  Employer 

•  online  opportunities 


Looktng  for  a 
new  IT  career? 

Explore  our 
huge  Jobs 
database 


careers 


advertiser  tools 


www.  itcareer  s  .com 


is  the  place  where  your 
fellow  readers  are  getting  a 
jump  on  even  more  of  the 
world's  best  jobs. 

Now  combined  with 
CareerJournal.com,  you  have 
more  jobs  to  choose  from. 

www.itcareers.com 
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Reading  someone  else’s  copy  of  COMPUTERWORLD  ? 


Apply  for  your  own 

FREE 

subscription  today. 


FREE  subscription 
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Apply  online  at: 
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Systems  Analyst 

Develops  &  implements  systems 
for  variety  of  industries.  Must 
have  Bach,  in  comp.  sci.  or  eng. 
plus  two  yrs.  prof.  exp.  in  senior 
Supply  chain  planning,  logistics 
&  business  process  transforma¬ 
tion  w/  Manugistics  Advanced 
Planning  &  Scheduling,  SAP  R3, 
OracleS  rel.  lang.  &  tools.  Peri, 
SQL  Loader  &  Web  Intel.  Fre¬ 
quent  travel  &  relocation. 
$67,000/yr.,  F/T,  hrs  vary.  Send 
resumes  to  Pgh/Alleg.  Cty. 
Careerlink  Attn:  CL  Program- 
Super.,  425  6th  Ave.,  Ste. 
2200, Pgh,  PA  15219-1837.  Ref. 
Job  Order  #  WEB  433084. 


Sr.  QA/Testing  Analyst  needed 
in  Wichita  to  perform  &  lead 
team  for  complex  testing  on 
complex  projects  using  Soft- 
brands  S/ware  Products 
Portfolio,  Internet  based  prod¬ 
ucts,  RIO,  Leisure  Mgmt, 
Landmark,  IGS  Worldwide, 
Medallion  &  Mercury  WinRunner 
in  Hospitality  domain;  assist 
w/installation  problems,  plan  & 
implmt  automated  testing; 
research  &  dvlp  mktg  reqmts. 
Resume  to:  SoftBrands 

Hospitality,  Two  Meridian 
Crossings  #800,  Minneapolis, 
MN  55423. 


Systems  Administrator  (with 
Bachelors  degree  and  5  years 
experience)  -  Columbus,  OH. 
Job  entails  and  requires  experi¬ 
ence  in  configuration  and  main¬ 
tenance  of  systems  using 
Veritas  Backup,  Windows  Active 
Directory,  Sun  Solaris  and  Citrix 
Metaframe  and  Exchange 
Server.  Develop  Systems  using 
P3,  Expedition  and  Kana. 
Relocation  within  USA  Possible. 
Attractive  compensation  pack¬ 
age.  Send  resume  to  Priya 
Venkat,  Technology  Software 
Inc.,  1515  Bethel  Rd.,  Suite  304, 
Columbus,  OH  43220. 


Computer  Professional  (Multiple 
Openings)  -  W/exp  in  one  or 
more  of  the  following  skills:  Cl 
C++,  JAVA,  Power  Builder,  Vi¬ 
sual  Basic,  Oracle,  Developer 
2000,  Sybase,  Windows,  Unix 
Admin,  People  Soft,  SQI  Server, 
SAP,  Oracle  Applications,  Cobol, 
Db2,  AS/400,  ASP,  .net. 

Lucrative  compensation.  Please 
E-mail  your  Resumes  to  the  fol¬ 
lowing  address: 

RESUMES@COMDATAUS.COM 

Attn.  HR  Department 
Comdata  Consulting,  Inc. 

2775  Algonquin  Rd 
Suite  #  240 

Rolling  Meadows,  IL-60008 
VISIT  WWW.COMDATAUS.COM 
For  More  Details 


BlazeTech  Corp.  is  hiring 
Senior  Engineers.  Design 
/Develop/maintain  engg 
computational  models  & 
software  applications,  de¬ 
velop  interfaces,  maintain 
web  infrastructure/content 
and  RDBMS.  Send  res¬ 
umes  to  BlazeTech,  24 
Thorndike  Street,  Cam¬ 
bridge,  MA  02141.  Appli¬ 
cants  must  meet  educa¬ 
tional  and  work  experi¬ 
ence  requirements. 


Systems  Analyst  needed  at 
client  sites  to  dsgn,  dvlp,  implmt 
Web  based  applies  using  current 
technology  incl  Oracle  Finan¬ 
cials  11i  (PO,  AP,  GL,  AR,  FA, 
INV,  HR,  Application  Object 
Libraries  &  System  Admin¬ 
istration),  Oracle  9i/9iAS.  Oracle 
Web  Application  Server,  PLSQL 
Cartridges,  Oracle  Forms 
6i/Reports  6i,  Dvlpr  2000,  Dsgnr 
2000,  SQL/PLSQL  Prgmg,  UNIX 
Shell  Prgmg,  Pro*C,  SQL 
Loader,  SABLIME,  HTML  & 
Javascript.  Resume  to:  Dolphin 
Solutions,  9567  Westover  Club 
Cir,  Windmere,  FL  34786. 


Sr  Programmer  Analyst.  Prog¬ 
ram  &  design  s/ware  compo¬ 
nents  using  Visual  C++,  Visual 
Basic,  Visual  SourceSafe,  DB2, 
SQL,  IIS,  ADO,  ODBC,  ASP, 
SNA  Server,  ATL,  Visual  Studio, 
C++,  COMTI,  N_tier,  Laureate, 
DCOM,  and  MTS.  Bachelor,  or 
equiv,  in  CS,  Eng'g,  Business,  or 
similar,  req'd,  as  is  2  yrs  of  exp 
in  job  offd  or  a  systems  analy¬ 
sis  position.  Mail  resumes  to  J. 
Cuniffe,  Job  #1915.23,  Sallie 
Mae,  Inc.,  11100  USA  Parkway, 
Fishers,  IN  46238. 


SYSTEMS  ANALYST/PRO¬ 
GRAMMER  -  (LA)  to  design, 
plan  &  implement  complex  app's 
in  ERP  systems,  ind'g  SAP; 
modify,  code  &  test  new 
enhanced  systems  &  programs 
utilizing  ABAP/4,  SAP  Script  & 
Java  programming  languages, 
using  Oracle  db,  dialog  pro¬ 
gramming,  SAP  objects,  config 
of  SAP  modules,  etc.,  &  evalu¬ 
ate  business  requests  for 
new/reengineering  appl's  for 
current  &  future  business  needs; 
35  hrs/wk.  Must  have  bach's  in 
comp  sci,  MIS,  Elec  Engrg  or 
Mech  Engrg  &  2  yrs  exp.  in  job. 
Contact  AIG  SunAmerica,  Attn: 
Pro.  Staffing  Mgr.,  1999  Ave  of 
the  Stars,  Century  City,  CA 
90067  &  quote  #12586 


Sr.  Quality  Eng.  wanted 
by  company  engaged  in 
graphics  and  multimedia 
technology  design,  manu¬ 
facturing  and  marketing. 
Requires  Bach,  in  CS  or 
EE  plus  5  yrs  exp.  includ¬ 
ing  audio/video  software. 
Reply  to  ATI  Research, 
Inc.  H.R.  Dept.,  Attn;  K.B., 
62  Forest  Street,  Marl¬ 
borough,  MA  01752. 


Software  Engineer  to  work 
on  eGovernment  and 
eCommerce  software  solu¬ 
tions.  Analyze  business  & 
technical  needs  to  develop 
customized  programs  and 
perform  related  duties. 
Bachelor's  degree  and  2  yrs 
related  experience  req¬ 
uired.  Send  resume  to 
Periscope  Holdings,  Inc., 
319  Congress  Avenue, 
Suite  200,  Austin,  TX 
78701. 


SOFTWARE  ENGINEER 

PCTEL  Inc.  a  global  leader  in 
simplifying  mobility  seeks  an 
experienced  Software  Engineer 
to  research  and  analyze  highly 
sophisticated  applications  for 
business  users.  Selected  candi¬ 
date  will  be  responsible  for  all 
phases  of  software  development 
including  architecture,  design, 
development,  testing  and  de¬ 
bugging  state-of-the-art  soft¬ 
ware  applications.  As  a  member 
of  a  development  team  you  will 
develop  a  multi-protocol  inter¬ 
face  for  IP  networks,  using 
C/C++,  JAVA,  Linux  (Unix), 
SQL,  SNMP,  TC/IP  and  wireless 
LAN's  protocol.  Duties  involve 
both  changes  to  existing  soft¬ 
ware  and  the  creation  of  new 
software  applications.  Will  be 
responsible  for  formulating  a 
plan  outlining  the  steps  to  devel¬ 
op  programs  using  structural 
analysis  and  design  techniques, 
and  preparing  flow-charts  and 
diagrams  to  illustrate  the 
sequence  steps  a  program  must 
follow  and  describe  the  logical 
operation  involved.  Requires 
Bachelor  of  Science  in  Comput¬ 
er  Science  or  its  equivalent  plus 
a  minimum  of  two  years  direct 
experience  in  the  job  offered. 
Position  also  requires  travel  to 
Eastern  Europe  approx.  20%  of 
the  year.  Candidate  must  be 
legally  eligible  to  work  in  the 
United  States  for  any  employer. 
Send  your  resume  directly  to: 
jobs@pctel.com  Please  include 
Job  code  407  Software  Engineer 
in  the  subject  line.  Or  mail  direct¬ 
ly  to:  HR  Dept.,  PCTEL,  Inc. 
8725  W.  Higgins  Rd.  Suite  400, 
Chicago,  II  60631.  PCTEL  Inc.  is 
an  equal  opportunity  employer. 


Computer/Info  Systems 

Information  Systems 
Professionals 

To  participate  in  analysis,  prob¬ 
lem  solving,  project  design  and 
technical  implementation  for 
major  products.  Participate  in 
the  timely  and  high  quality 
delivery  of  product;  implemen¬ 
tation,  integration,  design,  cod¬ 
ing,  testing  and  documentation 
of  custom  application  software; 
evaluate  user  requirements 
and  consult  with  design  team 
to  identify  current  procedures 
and  needs;  support  and  train 
end-users.  Technologies/  Plat¬ 
forms  used  include  UNIX, 
Windows  NT,  SQL  Server,  or 
Oracle  using  SQL,  C/C++, 
Visual  Basic.  Java,  Cobol  and 
other  appropriate  program¬ 
ming  languages  in  Client/ 
Server,  Network  and  Main¬ 
frame  environments.  Must 
have  a  Bachelors  degree,  or  its 
equivalent.  We  are  hiring  at  all 
experience  levels.  Please  send 
resume  to:  Human  Resources, 
Knightsbridge  Solutions,  500 
W.  Madison  Ave.,  Suite  3100, 
Chicago,  IL  60661  or 
recruiting@knightsbridge.com. 
EOE 


Technical  Marketing  Managers 
for  company's  IT  products  &  ser¬ 
vices.  Responsible  for  technical 
sales  &  marketing  of  custom  IT 
solutions  to  clients  in  the  bank¬ 
ing  &  financial  services  indus¬ 
tries.  Determine  customer  IT 
requirements  and  develop  tai¬ 
lored  sales  &  marketing  presen¬ 
tations.  Bachelor's  degree  in 
computer  science,  engineering 
or  a  related  field,  plus  3  years 
experience  in  marketing  of  IT 
software  products  &  services. 
Up  to  1  year  experience  may  be 
satisfied  with  master’s  degree  in 
marketing,  management  or 
finance.  Send  resume  and 
salary  requirements  to  i-flex 
solutions  inc.,  99  Park  Avenue, 
15th  FL,  New  York,  NY  10016, 
attn:  HR  Manager.  All  respons¬ 
es  must  include  job  code 
BQS604. 


IT  PROFESSIONALS 
Manager 

(Glen  Mills,  Pennsylvania  and  other  locations  through  the  U.S.)  Will  over¬ 
see  consulting  engagements  for  major  corporate  clients.  Will  meet  with 
client  management  to  assess  strategic  planning  and  business  operational 
requirements  in  order  to  determine  engagement  scope,  staffing,  and  bud¬ 
get.  Will  review  engagement  plans  with  assigned  professional  staff  and 
oversee  analysis  of  client  global  supply  chain  and  operations  including 
supply  chain  strategy;  new  product  development  process  for  Collabora¬ 
tive  Product  Commerce  (CPC)  such  as  PTC  Windchill.  &  Agile  Software 
implementation;  logistics  operations  for  Transportation/Warehouse  Man¬ 
agement  Systems  (TMS/WMS)  implementation  and  operations  excel¬ 
lence  for  Enterprise  Resource  Planning  (ERP)  such  as  Oracle.  SAP  and 
MFG/PRO  implementation.  Will  review  analyses  by  professional 
Consultants  and  Business  Analysts  regarding  industry  and  client  specific 
data  to  formulate  recommendations  on  operational  issues.  Will  supervise 
the  implementation  of  operational  and  system  modifications  by  client  cor¬ 
porations.  The  wage  offered  is  $100,895  per  year.  The  work  schedule  is 
Monday-Friday,  9:00  am  to  5:00  pm.  The  minimum  requirements  are  as 
follows:  Bachelor's  degree  or  equivalent  in  Computer  Science,  Math, 
Engineering  (any).  Information  Systems  or  Business  Administration  +  5 
years  of  experience  in  the  job  offered  or  5  years  of  experience  as  a 
Consultant,  Technology  Manager,  Senior  Engineer,  Principal  Product 
Designer.  Related  experience  must  include  at  least  six  months  of 
Transportation/Warehouse  Management  Systems  (TMS/WMS)  and 
Enterprise  Resource  Planning  (ERP)  and  Collaborative  Product 
Commerce  (CPC). 

Please  send  your  resume,  referencing  Job  Order  Number  WEB433066  to 
the:  PA  Careerlink,  FLC  Unit,  235  W.  Chelten  Avenue,  Philadelphia.  PA 
19144.  EOE. 


IT  PROFESSIONALS 
Consultant 

(Glen  Mills,  Pennsylvania  and  other  locations  through  the  U.S.).  Analyze 
client  business  requirements  and  perform  business  and  technical  com¬ 
parisons  to  decide  implementation  approaches.  Frame  functional  design 
and  technical  designs  for  implementation.  Coordinate  client  meetings  to 
bring  about  resolution  on  issues  and  clarity  in  communication.  Implement 
Siebel  as  the  Customer  Relationship  Management  (CRM)  package,  and 
integrate  Siebel  with  multiple  client  boundary  systems  through  Siebel 
Enterprise  Application  Integration  (EAI)  Layer.  Develop  interfaces  with  cli¬ 
ent  middleware  (Information  Highway),  and  test  transactions  end-to-end 
with  the  boundary  systems  to  successfully  deploy  and  support  the  imple¬ 
mentation.  Perform  Web  Development.  Perform  software  testing  using 
industry-standard  software  tools  such  as  Mercury  Interactive  Testing 
Suite.  Perform  database  tuning  of  client  systems  including  Oracle  8. 

WAGE:  $54, 000/year 

Hours  worked:  Monday-Friday  9:00am-5:00pm 
MINIMUM  REQUIREMENTS: 

Bachelor's  degree  or  equivalent  in  Computer  Science,  Engineering  (any 
type),  Math,  Business  Administration  or  Information  Systems  +  one  and  a 
half  years  exp.  in  the  job  offered  or  one  and  a  half  years  exp.  as  a 
Systems  Analyst,  Consultant,  or  Programmer.  Related  experience  must 
include  at  least  one  year  of  Web  Development,  Customer  Relationship 
Management/Siebel  (CRM),  Enterprise  Application  Integration  (EAI), 
Oracle  Databases  (including  Oracle  8),  and  Mercury  Interactive  Testing 
Suite.  Employer  will  regard  a  foreign  degree  to  be  equivalent  to  a  U.S. 
Bachelor’s  degree  as  determined  by  an  accredited  credentials  evaluation 
service. 

Please  send  your  resume,  referencing  Job  Order  Number  WEB4331 54  to 
the:  PA  Careerlink,  FLC  Unit,  235  W  Chelten  Ave.,  Philadelphia,  PA 
19144.  EOE. 


Systems  Analyst/Programmer  3, 
Wachovia  Corp.,  Charlotte,  NC. 
Design,  code,  test  client/server 
and  web  business  sols.  Reqs. 
BA  in  Elect,  and  Comm,  or 
Comp.  Science  and  2  yrs  exp.  in 
pos.  or  as  Software  Eng.  or  IT 
Consultant.  The  2  yrs.  must  incl. 
full  lifecycle  new  appl.  Dvlp.; 
conversion  of  specs,  into  code, 
testing/  prep,  of  code  for  prod.; 
debugging  and  correcting  exist¬ 
ing  code;  working  with  Sybase 
(or  similar)  in  a  Unix  environ, 
incl.  writing  stored  procedures, 
triggers  and  debugging  data¬ 
base  code;  MS  SQL  Server; 
Oracle;  PowerBuilder;  MS  Visu¬ 
al  Studio.NET;  or  similar  soft¬ 
ware  programming.  M-F,  8-5, 
Send  resume  to  Meredith 
Elberson,  Wachovia  Corp.,  401 
S.  Tryon  Street,  NC  0958, 
Charlotte,  NC  28288-0475.  No 
phone  calls. 


Systems  Analyst  sought  by  large 
employer  in  Electronic  Print 
Services  Industry.  Reqs  BS  in 
CS  or  MIS.  Min  2  yrs  prgmg  exp 
using  HTML.  JavaScript,  VB, 
ASP,  VB  Script  &  SQL  Server.  2 
yrs  exp  using  s/ware  pkgs  such 
as  CDP  Visual  Knowledge 
Manager  &  Visual  Studio.  Knowl 
of  print  data  files  such  as  AFP, 
DJDE  &  METACODE  reqd. 
Presentation,  Documentation  & 
Training  skills  reqd.  Working 
knowl  of  Win  NT,  2000  operating 
systems.  Knowl  of:  XML,  DCOM, 
MTS.  FOP  PDF,  MS  IIS,  SMTP  & 
JRun  reqd.  M-F  8-5.  Responses 
to  Scott  Erickson,  HR  Mgr, 
Moore  Wallace,  Business 
Communication  Svcs,  630  W. 
1000  North,  Logan.  UT  84321. 


Computer  Systems  Analyst  to 
conduct  software  application 
development  using  ASP,  .NET, 
and  Java  technologies,  and 
Cognos  Imppromptu/Power- 
Play;  software  application  sup¬ 
port  and  troubleshooting  both  for 
Hardware  and  Software;  server 
configuration  and  installation  of 
servers;  getting  data  out  of 
Legacy  Systems  and  putting 
them  in  Relational  database  as 
well  as  analyzing  and  trending 
the  data.  Requires:  minimum  of 
Bachelor's  degree  in  Computer 
Science  or  related  field  and  36 
months  of  working  experience. 
Prior  working  experience  with 
Cognos  Impromptu/PowerPlay, 
Business  Case  Development. 
ASP,  .NET,  and  Java  technolo¬ 
gies  and  strong  background  in 
Oracle  and  SQL  Server,  3-D 
Data  modeling  (CUBES)  is  pre¬ 
ferred.  Some  holiday  on-call 
required.  Please  send  resumes 
to  Chris  Jircitano,  Vanderbilt 
University  Medical  Center, 
Informatics  Center,  B706  The 
Vanderbilt  Clinic,  1301  22nd 
Avenue  North,  Nashville,  TN 
37232-5655. 


Sage  IT  is  looking  for  IT  profes¬ 
sionals  to  develop  applications 
using  Cognos  Impromptu,  Pow- 
erPlay,  ReportNet,  SQL,  Oracle, 
Tera  data  (NCR),  Sybase,  Es- 
base,  DB2,  Red  Bricks.  Informa- 
tica,  Data  Stage,  Ab  Initio,  Web 
Logic/Sphere.  JSP,  ASP.  Min. 
BS  w/  exp.  Please  contact 
info@saoeitinc.com.  EOE 

Digital  has  long  term  position  for 
EDI/System  Analyst  and  DBA  to 
implement  e-commerce  Gate¬ 
way  modules  in  Oracle  applica¬ 
tion  ii;  perform  end-to-end  EDI 
implementation  (mapping,  scrip¬ 
ting);  create  database  on  SQL; 
use  VB,  Java,  ERP  tools.  Please 
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Software  Engineer  -  System 
Analysis  and  Design,  Temple 
Terrace,  FL  -  design  and  devel¬ 
op  business  process  automation 
software  for  large  OLTP  (On- 
Line  Transaction  Processing) 
system  on  a  client-server  archi¬ 
tecture  using  C.  C++,  RDBMS, 
E-SQL,  Informix  database  de¬ 
sign  and  management,  cross¬ 
platform  middleware  infrastruc¬ 
ture,  distributed  architecture  and 
UNIX  operating  system  with 
interprocess  communication 
techniques;  investigate  and  im¬ 
plement  methods  for  improving 
execution,  efficiency,  accuracy 
and  performance  of  corporate 
production  applications;  ana¬ 
lyze,  design,  code,  test,  esti¬ 
mate  and  implement  service  re¬ 
quites  for  solutions  to  customer 
requirements;  identify,  recom¬ 
mend  and  document  effective 
design  methodologies  and  tools 
to  be  utilized  during  design,  cod¬ 
ing,  testing,  implementation  and 
maintenance  phases.  Requires 
Bachelors  in  Computer  Engin¬ 
eering  and  either  r  3  years  expe¬ 
rience  in  the  job  offered  or  3 
years  experience  in  the  develop¬ 
ment  of  client-server  solutions 
on  large  OLTP  systems  using 
C++  and  RDGBMS  on  UNIX, 
distributed  architecture  and  ap¬ 
plication  performance  tuning. 
Salary  $72,100/yr,  40  hrs/wk, 
8AM-5PM,  Mon-Fri.  Send  res¬ 
ume  to  Workforce  Program 
Support,  P.O.  Box  10869, 
Tallahassee,  FL  32302-0869, 
refer  to  J.O.  #  FL-2532338. 


Software  Engineer  (in  Temple 
Terrace,  FL)  to  provide  24x7 
technical  support  of  critical  appli¬ 
cations  by  monitoring  Sun  and 
UNIX  production  servers  using 
patrol  monitoring  and  patrol 
scripting  language;  responsible 
for  web  server,  performance 
analysis  and  design  of  network 
wide  file  system  layouts;  identify 
tasks  requiring  automation  and 
apply  appropriate  processes  to 
each;  develop  and  provide  tech¬ 
nical  designs,  capacity  planning 
and  architectural  solutions  using 
UNIX,  Windows  NT  and  TCP/IP 
protocol;  write  technical  propos¬ 
als  and  procedures;  conduct  pre¬ 
sentations  and  serve  as  liaison 
with  interfacing  organizations; 
interact  with  administrators  and 
developers  to  resolve  application 
issues,  increase  productivity  and 
plan  the  future  development  of 
software  applications.  Requires 
Masters  degree  in  Computer 
Science  and  either  2  years  expe¬ 
rience  in  the  job  offered  or  2 
years  experience  providing  24x7 
technical  support  of  critical  appli¬ 
cations  by  monitoring  Sun  and 
UNIX  production  servers  using 
patrol  monitoring  and  patrol 
scripting  language.  Salary 
$69,000/yr,  Mon-Fri,  8AM-5PM, 
40  hrs/wk.  Send  resume  to 
Workforce  Program  Support, 
P.O.  Box  10869,  Tallahassee,  FL 
32302-0869,  refer  to  J.O.  #  FL- 
2532346. 


Software  Engineer:  Designs,  de¬ 
velops,  modifies,  and  imple¬ 
ments  customized  software  ap¬ 
plications  in  a  large  and  diverse 
user  environment  within  a  broad 
framework  of  standards,  policies 
and  procedures  in  a  multiple  op¬ 
erating  system  environment  us¬ 
ing  EJB,  J2EE,  Jdeveloper, 
Weblogic,  Cocobase,  Oracle 
8iRational  Rose,  RPG/400  and 
related  technologies.  Develops 
and  directs  applications  testing 
procedures  and  programming. 
Writes  technical  documentation. 
Must  have  BS  or  equivalent  in 
CS/CIS  Math/Engineering  or  re¬ 
lated.  Must  have  1  yr.  exp.  in  job 
offered  or  in  software  develop¬ 
ment  with  Weblogic,  Jdeveloper, 
Cocobase  and  RPG/400.  Will 
accept  a  combination  of  educa¬ 
tion  and  experience  evaluated 
by  a  recognized  authority  as 
equivalent  to  a  bachelor’s  de¬ 
gree.  Must  be  willing  to  be  as¬ 
signed  to  unanticipated  client 
sites  throughout  the  State  of 
Maine.  Salary:  $72,000/yr.  Hrs: 
8:00am-5:00pm,  40/wk.  Please 
send  2  copies  of  resume  to: 
Bureau  of  Labor  Standards,  45 
State  Flouse  Station,  Augusta, 
Maine,  04333-0045  Please  refer 
to  Job  Order  #50555  for  Soft¬ 
ware  Engineer. 


Software  Engineer  (in  Temple 
Terrace,  FL)  to  perform  circuit- 
provisioning  system  design  and 
development  using  C++,  Oracle 
and  J2EE  on  a  UNIX  platform; 
provide  conceptual  and  high- 
tech  solutions  to  complex  busi¬ 
ness  and  technical  problems; 
develop  and  implement  stan¬ 
dards  and  verify  results;  provide 
technical  expertise  in  operating 
systems  and  applications  sys¬ 
tems  in  the  telecommunications 
industry;  design  and  develop 
business  process  automation 
systems  for  the  telecommunica¬ 
tion  industry  on  client-server 
architecture  using  C++,  Oracle 
and  J2EE;  provide  technical  so¬ 
lutions  to  meet  documented  re¬ 
quirements  within  schedule; 
identify,  recommend  and  docu¬ 
ment  effective  design  method¬ 
ologies  and  tools  to  be  utilized 
during  the  design,  coding,  test¬ 
ing,  implementation  and  installa¬ 
tion  phases.  Requires  Bachelors 
in  Engineering  or  Computer  Sci¬ 
ence  and  either  1  year  exp  in  the 
job  offered  or  1  year  exp  in  cir¬ 
cuit-provisioning  system  design 
and  development  using  C++, 
Oracle,  and  J2EE  on  a  UNIX 
platform.  Salary  $64,200/yr,  Mon 
-Fri,  8AM-5PM,  40  hrs/wk.  Send 
resume  to  Workforce  Program 
Support,  P.O.  Box  10869, 
Tallahassee,  FL  32302-0869, 
refer  to  J.O.  #  FL-2532343. 


Software  Engineer,  Temple  Ter¬ 
race,  FL  -  perform  client-server 
architecture  application  develop¬ 
ment  using  C/C++,  CORBA  and 
Informix  on  a  UNIX  platform;  de¬ 
sign  and  develop  business  pro¬ 
cess  automation  for  the  telecom 
industry  using  cross  platform  in- 
house  middleware  infrastructure 
that  would  perform  inter-process- 
communication  and  system  calls 
to  define  the  coordination  model 
along  with  a  configuration  man¬ 
agement  system;  provide  con¬ 
ceptual,  architectural  solutions  to 
telecom  network  business 
needs;  provide  senior  manage¬ 
ment  with  design  recommenda¬ 
tions  and  alternatives;  design 
and  build  provisioning  and  inven¬ 
tory  telecom  systems;  interface 
and  replace  existing  legacy  sys¬ 
tems;  design  coordination  be¬ 
tween  distributed  systems  help¬ 
ing  telecom  network  operations. 
Requires  Masters  in  Electronic 
Engineering  or  Computer  Sci¬ 
ence  and  either  3  yrs.  experi¬ 
ence  in  the  job  offered  or  3  yrs. 
experience  in  client-server  archi¬ 
tecture  application  development 
in  the  telecom  industry  using 
C/C++,  CORBA  and  Informix  on 
a  UNIX  platform.  Salary  $84,800/ 
yr,  40  hrs/wk,  8AM-5PM,  Mon- 
Fri.  Send  resume  to  Workforce 
Program  Support,  P.O.  Box 
10869,  Tallahassee,  FL  32302- 
0869,  refer  to  Job  Order  #FL- 
2532351. 


The  Thalerus  Group,  a  Schaum¬ 
burg,  Illinois  Software  Engineer¬ 
ing  Firm  is  looking  for  multiple  IT 
professionals  with  B.S.  Degree 
plus  at  least  1  yr  exp.  in  XML/ 
XSLT,  SQL  Server  Design/ 
Admin,  ASP,  Search  Engine 
development  and  Visual  Basic. 
Send  resume  to  Lillian  Yeh 

The  Thalerus  Group,  1111  Plaza 
Drive,  Suite  510,  Schaumburg, 
IL  60173. 


IT  Professionals 


Seeking  qualified  candidates 
for  Sr.  &  mid-level  IT  profes¬ 
sional  positions  including: 
Programmer  Analysts,  Data¬ 
base  Administrators,  Software 
Engineers,  IT/Software  and 
similar  type  positions.  Candi¬ 
dates  must  possess  MS/BS  or 
equivalent  and/or  related 
work  experience.  Please  mail 
resume  and  references  to: 
Patel  Consultants  Corn. 

Attn:  HR 

1525  Morris  Ave. 

Union,  NJ  07083  eoe 


Software  Engineer  (Temple 
Terrace,  FL)  to  provide  advice  to 
management  on  complex  tech¬ 
nical  issues  and  appropriate 
application  of  technologies  relat¬ 
ing  to  OLTP  (on-line  transaction 
processing)  software  applica¬ 
tions  development  using  C++, 
UNIX,  Oracle  relational  data¬ 
base  and  Java;  design,  analyze, 
estimate  and  implement  service 
requests  to  ensure  solutions 
meet  customer  requirements; 
identify,  recommend  and  docu¬ 
ment  effective  design  method¬ 
ologies  and  tools  to  utilize  during 
the  design,  coding,  testing  and 
implementation  of  installation 
phases.  Requires  Bachelors  in 
Computer  Science  and  either  5 
yrs  exp  in  job  offered  or  5  yrs 
exp  in  OLTP  software  applica¬ 
tion  development  using  C++, 
UNIX  and  Oracle.  Salary 
$77,300/yr,  Mon-Fri,  8AM-5PM, 
40  hrs/wk.  Send  resume  to 
Workforce  Program  Support, 
P.O.  Box  10869,  Tallahassee,  FL 
32302-0869,  refer  to  J.O.  #  FL- 
253118. 


SOFTWARE  ENGINEER  to  de¬ 
sign,  develop,  configure,  trou¬ 
bleshoot  and  customize  various 
PeopleSoft  modules,  including 
GL,  AM,  AP,  AR,  EX,  PC  and 
CA,  using  PeopleSoft  Finan¬ 
cials,  BPM,  Peopletools  and  MS 
SQL  Server  while  successfully 
adhering  to  company's  project 
life  cycle  process.  Require:  M.S. 
degree  in  Computer  Science/ 
Engineering,  Info.  Systems,  or  a 
closely  related  field  with  2  yrs  of 
experience  in  the  job  offered  or 
as  a  Programmer/Analyst.  Ex¬ 
tensive  travel  on  assignments  to 
various  client  sites  within  the 
U  S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to:  Rajender  Gaddam,  Director 
of  FIR,  Orpine  Enterprises,  LLC, 
1004  Crooked  Creek  Court, 
Mableton,  GA  30126;  Attn:  Job 
HS. 


NEED  TO  HIRE 
FAST? 

START  HERE 
FIRST! 

IT  Careers  and 
itcareers.com  reach 
more  than  2/3  of 
all  US  IT  profes¬ 
sionals  every  week. 
If  you  need  to  hire 
top  talent,  start  by 
hiring  us. 

Check  us  out  at: 
www.itcareers.com 
or 

call  (800)  762-2977 


We  Do 
A 

Better  Job 

A  T 


Helping  You 

GET  ONE! 

Search  our  jobs  database 
and  post  your  resume  on 
www.itcareers.com! 


Computerworld  •  July  12,  2004 


CW071204N/4 


I 

I 

[ 


. 


it  careers.com 


IT 


enterprise  integration 
network  vulnerabilities 
corporate  data  security 
government  compliance 
mobile  &  wireless  security 
business  management  needs 


The  right  IT  professional 
can  jump  the  hurdles  of 
today’s  IT  challenges. 


Call: 

(800)  762-2977 


Software  Engineer  (Temple  Ter¬ 
race,  FL)  -  Design,  develop,  and 
implement  applications  and  sys¬ 
tems  for  telecommunications 
industry  by  programming  main¬ 
frame  applcaitons  using  COBOL, 
MVS  and  JCL  (Job  Control  Lan¬ 
guage)  and  using  client/server 
programs  including  UNIX,  C++, 
Informix  and  PERL;  design,  de¬ 
velop,  and  test  data  processing 
service  requirst  for  carrier  access 
billing  system  and  activiation. 
Requires  Bachelors  in  Computer 
Informaiton  Systems  or  Manage¬ 
ment  Information  Systems  and 
either  4  yrs  exp  in  job  offered  or 
4  yrs  exp  in  programming  main¬ 
frame  appliciatons  using  COBOL 
and  JCL  with  experience  to 
include  6  months  designing  and 
implementing  applications  for 
telecom  industry  using  client/ 
server  programs.  Salary  $62,100 
/yr,  Mon-Fri,  8AM-5PM,  40  hrs/ 
wk.  Send  resume  to  Worforce 
Program  Support,  P.O.  Box 
10869,  Tallahassee,  FL  32302- 
0869,  refer  to  J.O.  #  FL-2530520. 


Systems  Analyst:  Analyzes, 
tests,  modifies,  and  maintains 
computer  programs  or  systems 
using  Oracle,  VB  or  Java,  and 
related  technologies  in  UNIX, 
VMS  and  NT  platforms.  Formu¬ 
lates  program  and  system  de¬ 
sign  procedures,  test  plans,  and 
program  development  specifica¬ 
tions.  Prepares  technical  docu¬ 
mentation.  Must  have  BS  or 
equivalent  in  CS/Math/Engineer- 
ing  or  related.  Must  have  2  yrs 
exp.  in  job  offered  or  in  Software 
design,  development  &  integra¬ 
tion  using  Oracle  and  VB  Will 
accept  a  credential  evaluation 
by  a  recognized  authority  as 
equivalent  to  a  bachelor's  de¬ 
gree.  Must  be  willing  to  be 
assigned  to  unanticipated  client 
sites  throughout  the  United 
States.  Salary:$80,000/yr  Hrs: 
8:00am-5:00pm,  40/wk.  Please 
send  2  copies  of  resume  to: 
Case  No.  200300938,  Division 
of  Career  Services,  Labor  Certi¬ 
fication  Unit,  19  Stamford  St.,  1st 
FI,  Boston,  MA  02114. 


Positions  are  available  in 
Columbus,  Ohio  for  Software 
Developers  with  a  company  that 
develops  software  solutions  for 
the  healthcare  industry.  The 
Software  Developers  will  work 
under  direct  supervision  to  de¬ 
velop,  program,  and  test  appli¬ 
cations  for  hospital  billing  sys¬ 
tems  and  assist  with  modifica¬ 
tions.  Candidates  for  this  posi¬ 
tion  should  possess  a  Bachel¬ 
or's  degree  in  Computer  Sci¬ 
ence,  Life  Sciences  with  Com¬ 
puter  Science  concentration,  or 
a  computer  field  and  at  least  6 
months'  experience  in  computer 
programming;  and  demonstrat¬ 
ed  knowledge  of  C++  or  C#  and 
one  of  the  following,  JAVA, 
Oracle,  or  Access. 

Apply  with  resume  by  mail  to: 
Ms.  Maria  Dress 
Per-Se  Technologies,  Inc. 
26777  Lorain  Road 
Suite  304 

North  Olmstead,  Ohio  44070 


Select  Source  International  has 
opportunities  for  Computer 
Programmers,  Programmer  An¬ 
alysts,  Systems  Analysts,  Soft¬ 
ware  Engineers,  DBA's  and 
Software  Consultants  with  exp. 
in  two  or  more  of  the  following 
skills:  OOD,  SQL,  PL/SQL, 
Java,  J2EE,  WSAD,  Unix,  DB2, 
MVS,  CICS,  COBOL,  Visual 
Basic,  C++,  C#,  Oracle,  Sy¬ 
base,  Crystal  Reports,  Java¬ 
Script,  HTML,  DHTML,  IIS, 
ASP,  .NET,  RETEK  RMS  & 
RDM.  BS  or  MS  depending  on 
position,  lyr  exp  reqd  depend¬ 
ing  on  position  We  also  accept 
the  foreign  edu.  equiv.  or  any 
suitable  comb,  of  edu.,  training 
or  exp.  Frequent  travel  &  relo¬ 
cation.  Send  resume  and  sal¬ 
ary  reqmts  to:  Select  Source 
International  10501  Wayzata 
Blvd,  Ste  200,  Minnetonka,  MN 
55305.  Visit  our  website  at 
www.S3CI.com. 


COMPUTER 

SQL  Server  Database 
Administrator  Developer- 

For  various  unanticipated 
client  locations  throughout  the 
U.S.  Provides  support  for  the 
client’s  financial  database; 
Makes  enhancements  to 
interfaces  using  Visual  Basic 
and  SQL  Server.  Requires  a 
bachelor's  degree  or  foreign 
equivalent  in  Com.  Science, 
Engineering,  Com.  Engineer, 
Info.  Systems  or  related  field 
and  three  years  of  experience 
in  the  field  such  as  software 
consultant,  programmer/ 
analyst,  etc.  Annual  salary 
$81,120. 

Submit  resume  or  C.V.  to: 

PA  CareerLink,  FLC  Unit 
235  W.  Chelten  Avenue 
Philadelphia,  PA  19144 
Job  order  number 
WEB  431234. 


Systems  Engineer,  Temple  Ter¬ 
race,  FL  -  develop  applications 
using  C++,  Informix  database, 
CORBA  and  J2EE  technologies 
in  a  telecom  domain  for  DSL, 
loop  qualification  and  IP/VPN 
(internet  protocol  voice  over  and 
virtual  private  network);  respon¬ 
sible  for  providing  system  solu¬ 
tions  for  broadband  technolo¬ 
gies;  develop  and  maintain  auto¬ 
mated  broadband  provisioning 
systems  on  client  server  archi¬ 
tecture;  provide  management 
with  system  design  recommen¬ 
dations  in  conformance  with 
guidelines  and  coordinate  imple¬ 
mentation  of  design.  Requires 
Bachelors  in  Electrical  Engineer¬ 
ing  or  Computer  Science  and 
either  3  yrs.  Exp.  in  the  job  of¬ 
fered  or  3  yrs.  Exp.  in  application 
development  using  C++,  Inform¬ 
ix  database,  CORBA  and  J2EE 
technologies  in  a  telecom  do¬ 
main  for  DSL,  loop  qualification 
and  IPA/PN.  Salary  $75,000/yr, 
40  hrs/week,  8  AM  to  5  PM,  Mon 
-Fri.  Send  resume  to  Workforce 
Program  Support,  P.O.  Box 
10869,  Tallahassee,  FL  32302- 
0869,  refer  to  Job  Order  #FL- 
2531856. 


Application  Developer.  Software 
analysis  &  development  for  man¬ 
agement  information  systems. 
Web-based  development,  techni¬ 
cal  documentation  &  support. 
Tech  environment:  NET  Tech¬ 
nology;  Visual  Basic;  VB.NET; 
ASP.NET;  Crystal  Reports;  SQL 
Server;  JavaScript;  HTML.  Bach¬ 
elor's  in  Comp.  Sci.  +  6  mo.  exp 
in  job  offered  or  as  Programmer 
or  Student  Application  Program¬ 
mer  req'd.  Education  must  in¬ 
clude  1  project  each  in  .NET 
Technology  &  JavaScript.  40 
hrs/wk,  8:30am-6pm,  $48,000/yr. 
Job  location:  Boca  Raton,  FL. 
Must  have  proof  of  legal  authori¬ 
ty  to  work  in  the  U.S.  Submit  res¬ 
ume  to  Workforce  Program  Sup¬ 
port,  PO  Box  10869,  Tallahas¬ 
see,  FL  32302-0869.  RE:  JOFL# 
2531718.  Employer  pd  ad. 


Verinon  Technology  Solutions 
Ltd.  is  looking  for  the  following 
personnel:  Software  Engineers/ 
Programmer  Analysts/Manage¬ 
ment  Analysts  3)  QA  Analysts: 
Should  have  a  Bachelor's  De¬ 
gree  in  Computer  Science/Re¬ 
lated  field  with  2  years  experi¬ 
ence  in  any  2  of  the  following: 
Java.  XML.  J2EE.  EDI,  Rational 
Rose,  WinRunner,  LoadRunner, 
TestDirector,  C++,  EJB,  Siebel, 
Web  Application  Servers,  Orac¬ 
le.  DB2,  Sybase,  MS  SQL  Ser¬ 
ver,  SQL,  PL/SQL,  Coldfusion, 
Documentum,  PeopleSoft.SAP, 
Unix  Scripts,  JD  Edwards,  SAS, 
Visual  Basic,  ASP,  ADO,  Net, 
Visual  C++,  Business  Objects, 
Lotus  Notes,  Informatics.  Data- 
Stage,  Ablnitio  and  Cognos.  We 
offer  competitive  salary  and  ben¬ 
efits.  Mail  Resume  to  Human 
Resources.  Verinon  Technology 
Solutions  Ltd.825  E  Rand  Road, 
Suite  210,  Arlington  Heights,  IL 
60004. 


Programmer  Analysts  -  Conseco 
Services,  LLC,  Carmel,  Indiana, 
has  positions  for  programmer 
analysts  to  plan,  develop,  test, 
and  document  computer  pro¬ 
grams  applying  knowledge  of 
program  techniques  and  com¬ 
puter  systems;  provide  expertise 
to  programmer  analysts  in  the 
U.S.  and  India  for  programming 
projects  being  executed  in  India 
for  U.S.  customers;  interface 
with  marketing  managers  and 
support  marketing  initiatives  by 
preparing  the  required  materials 
and  presentations;  perform  and 
provide  expertise  to  analysts  in 
coding,  testing,  validation,  and 
code  installation  as  well  as  pro¬ 
vide  maintenance  and  support 
of  software  applications;  com¬ 
municate  between  transborder 
operations;  configuration  man¬ 
agement  of  program  changes  by 
customer;  and  update  existing 
and  develop  new  training  mod¬ 
ules  for  programmers  and  ana¬ 
lysts.  Candidates  must  have  a 
bachelor's  degree  in  computer 
science  or  a  related  field. 
Candidates  must  be  authorized 
to  work  permanently  in  the 
United  States.  Please  direct 
resumes  to  Bernard  Hodes 
Group  Reply  Service,  #83152, 
8440  Woodfield  Crossing,  Suite 
290,  Indianapolis,  IN  46240.  No 
phone  calls,  please.  An  equal 
opportunity  employer. 


Oracle  Data  Warehouse  Engin¬ 
eer:  Perform  application  analy¬ 
sis,  design,  development,  testing 
and  support  in  client  server,  multi 
tier  architecture  and  data  ware¬ 
house  applications  on  Unix  and 
Windows  Platforms.  Work  prim¬ 
arily  on  Data  Warehouse  and  En¬ 
terprise  Applications  on  Oracle 
RDBMS,  Oracle  Applications,  PL 
/SQL,  Java,  XML,  Oracle  Devel¬ 
oper  2000  (Forms  and  Reports), 
Discoverer,  Designer,  ETL,  Infor¬ 
matics  and  Bl  tools  such  as  Bus¬ 
iness  Objects.  Perform  database 
tuning  and  application  tuning  and 
develop  procedures  using  PL/ 
SQL.  Develop  scripts  using  PL/ 
SQL  and  Shell  on  Oracle  and 
Unix.  Req:  Bachelor  Degree  in 
Computer  Science,  Engineering 
or  related  field  and  two  yrs  expe¬ 
rience  performing  application  de¬ 
sign/development  on  data  ware¬ 
house  and  enterprise  application 
using  Oracle  RDBMS,  PL/SQL, 
Forms,  Reports,  ETL,  Infomnati- 
ca,  Bl  Business  Objects,  data¬ 
base  tuning,  Oracle  Applications 
Modules  and  Shell  Scripts  on 
Unix  and  Windows.  If  no  degree 
or  unrelated  degree  will  accept 
applicants  with  three  years  of 
college  level  education  and  three 
years  of  application  design  and 
development  experience  of 
which  two  years  is  the  specific 
experience  stated  above.  Job 
Location;  will  work  at  various 
client  sites  throughout  the  U.S. 
as  assigned  by  employer.  Salary: 
$70, 000/year.  Send  two  copies 
of  resume/letter  of  application  to: 
Job  Order  #2004-920,  P.O.  Box 
989,  Concord,  NH  03302-0989 


Software  Engineer  (in  Temple 
Terrace,  FL)  to  design  and  de¬ 
velop  automated  work  assign¬ 
ment  and  tracking  software 
packages  using  C  and  C++  in  a 
Windows  and  UNIX  environ¬ 
ment;  develop  applications  us¬ 
ing  client/server  architecture, 
object-oriented  system  design 
and  programming,  UNIX  and 
Windows  platforms,  algorithm 
design  and  implementation;  per¬ 
form  network  and  internet  soft¬ 
ware  development;  identify,  rec¬ 
ommend  and  document  effec¬ 
tive  design  methodologies  and 
tools  for  the  design,  coding,  test¬ 
ing,  implementation  and  installa¬ 
tion  phases  Requires  Masters 
degree  in  Computer  Science 
and  either  1  year  exp  in  job 
offered  or  1  year  exp  in  design¬ 
ing  and  developing  automated 
work  assignment  and  tracking 
software  packages  using  C  and 
C++  in  a  Windows  and  UNIX 
environment.  Salary  $62,000/yr, 
Mon-Fri,  8AM-5PM,  40  hrs/wk. 
Send  resume  to  Workforce 
Program  Support,  P.O.  Box 
10869,  Tallahassee,  FL  32302- 
0869,  refer  to  J.O.  #  FL- 
2531406. 


Software  Engineer.  Temple 
Terrace.  FL  -  design  and  devel¬ 
op  security  and  reports  web 
infrastructure  using  Java  server 
pages  and  servlets  to  support 
mission  architecture:  design 
cross-browser  based  web 
graphical  user  interface  using 
scripting  language;  develop  in¬ 
terfaces  to  supplier  gateway  and 
billing  system  using  C++, 
CORBA,  Java  and  Oracle  on  a 
Unix  platform  in  a  multi-threaded 
environment;  develop  database 
libraries  using  Oracle  Call  Inter¬ 
face  to  access  Oracle  database, 
design  database  structure  and 
application  servers  in  C++  to 
access  database;  develop  Java 
swing  based  client  screens;  pro¬ 
vide  advice  to  management  on 
complex  technical  issues  and 
appropriate  application  of  tech¬ 
nologies  relating  to  database 
management,  operating  sys¬ 
tems,  business  modeling,  object 
oriented  design,  system  perfor¬ 
mance  and  data  resource  man¬ 
agement.  Requires  Masters  in 
Computer  Science  or  Computer 
Engineering  and  either  2  yrs. 
experience  in  the  job  offered  or 
2  yrs.  experience  in  software 
development  for  the  web  using 
C++,  CORBA,  Java  and  Oracle 
on  a  UNIX  platform.  Salary 
$78,000/yr,  40  hrs/week.  8AM- 
5PM,  Mon-Fri.  Send  resume  to 
Workforce  Program  Support, 
P.O.  Box  10869,  Tallahassee,  FL 
32302-0869,  refer  to  Job  Order 
#FL-2532334. 


Programmer  Analyst 

(IBM  Mainframe!  - 

Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance, 
support  and  conversion  of  large 
volume  online  transaction  pro¬ 
cessing  and  batch  application 
systems  in  a  multi-hardware/ 
multi-software  environment  over 
centralized  database  systems 
using  relational/hierarchical/net¬ 
work  database  management 
systems,  Third  Generation  Lan¬ 
guages  (3GLs),  Fourth  Genera¬ 
tion  Languages  (4GLs),  CASE 
tools  and  Transaction  Proces¬ 
sing  Software.  Bachelor's  De¬ 
gree  (or  equivalent)  in  Computer 
Science-Math/Engineering/ 
Science/Business-Commerce 
and  1  yr.  experience  in  job  of¬ 
fered  or  as  Software  Engineer/ 
Systems  Analyst  are  required. 
Must  have  appropriate  combina¬ 
tion  of  skills  as  follows:  1  of  A 
and  1  of  B  and  1  of  C;  or  1  of  A 
and  2  of  B;  or  1  of  A  and  2  of  C. 
A  includes  DB2,  IMS  DB  and 
IDMS  DB;  and  B  includes  CICS, 
IMS  DC,  IDMS  DC,  ADS/O, 
QMF,  VSAM  and  MF-Work- 
bench;  and  C  includes  TELON, 
IEF,  ADW,  CSP  and  APS;  High 
mobility  preferred.  40  hrs/week, 
8  am  -  5  pm.  $66,533  -  $78,000 
per  year.  Qualified  applicants 
should  contact  or  send  resume 
to:  BECS/CareerLink  Program 
Supervisor,  Indiana  County 
CareerLink,  300  Indian  Springs 
Road,  Indiana,  PA  15701.  Refer 
to  Job  Order  #  WEB  433178. 


Software  Engineer  -  Systems 
Analysis  &  Programming 

(Temple  Terrace,  FL):  To  lead  the 
design  and  development  of  tele¬ 
communications  software  sys¬ 
tem  solutions  relating  to  complex 
architectural  and  design  issues; 
analyze  software  requirements 
and  define  target  architecture  by 
translating  requirements  and 
processes  into  detailed  strategic 
decisions  for  implementation  by 
software  engineers  and  opera¬ 
tion  personnel;  develop  and 
direct  to  develop  software  pro¬ 
grams  used  in  the  telecommuni¬ 
cations  industry  using  various 
programming  languages  includ¬ 
ing  Java,  C.  C++,  HTML,  Oracle, 
and  XML,  running  under  multiple 
platforms  and  operating  systems 
including  UNIX,  Windows,  and 
Linux  Requires  Masters  in  Com¬ 
puter  Science,  plus  either  1  year 
exp  in  job  offered  or  1  year  exp  in 
telecommunications  software  de¬ 
velopment  using  C++,  Oracle. 
Java  and  HTML  Salary  $92,100/ 
yr.  Mon-Fri.  8MA-5PM,  40  hrs/ 
wk.  Send  resume  to  Workforce 
Program  Support,  PO  Box 
10869,  Tallahassee,  FL  32302- 
0869,  refer  to  J.O.  #  FL-2531141 
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One  of  the  misdirected  e-mails  that 
contained  private  information  about 
Contra  Costa  County  employees 

er  municipal  corporations,” 
said  Krent. 

Moreover,  even  if  the  county 
is  defined  as  a  person  within 
the  meaning  of  the  law,  it’s  un¬ 
clear  if  there  is  a  remedy  for  a 


failure  to  notify,  said 
Krent.  “Only  ‘cus¬ 
tomers’  can  sue  to  re¬ 
cover  damages  due  to  a 
failure  to  notify,”  he 
said.  “This  suggests 
that  county  residents 
whose  information  is 
maintained  because 
they  consume  water  or 
waste  removal  services 
could  sue.”  But  resi¬ 
dents  wouldn’t  be  able 
to  sue  simply  by  virtue 
of  their  status  as  taxpay¬ 
ers;  there  has  to  be  a  cus¬ 
tomer/service  provider  rela¬ 
tionship  in  place,  Krent  noted. 

Professor  Jeff  Matsuura  of 
the  University  of  Dayton 
School  of  Law  said  the  e-mails 
appear  to  contain  personally 
identifiable  information  that  is 
covered  by  SB  1386.  “It  seems 
to  me  that  such  an  incident 
would  gut  the  statute  if  this 
kind  of  disclosure  did  not  fall 
within  it,”  he  said.  ©  48086 


Subled:  Re:  Management  Longevity  Differential 

No  probfem...We  can  let  him  know  H  wil  be  on  Ms  7/10  check. 

I  do  have  another  request:  One  of  the  commissioners  retired 
before  we  processed  the  pay  Increase  effective  last  year 
6/1/03  (Comm.  ■■■■■)--  We  DO  want  Mm  to  receive 
retro  pay.  and  we're  tMnking  Ms  retirement  wil  also  be 
affected  by  the  increase  and  retro  pay. 

What  do  you  need  us  to  do  (if  anything)  to  be  sure  this 
happens? 


Also,  well  want  his  retro  check  to  come  here  so  we  ri 
contact  Mm  about  either  picking  it  up  or  mating  it. 


Thanks. 


Dana 


Continued,  from  page  1 

Privacy  Law 

ernment,  said  the  county  be¬ 
came  aware  of  the  problem 
only  after  being  notified  by 
Computerworld.  A  prelimi¬ 
nary  investigation  revealed 
that  the  problem,  which  has 
since  been  fixed,  was  the  re¬ 
sult  of  some  county  employ¬ 
ees  using  erroneous  e-mail 
address  books  and  was  not 
caused  by  a  virus  or  worm  in¬ 
fection,  he  said. 

According  to  Whittington, 
the  glitch  stemmed  from  the 
county’s  Internet  naming 
structure,  which  includes  “.ac” 
for  the  auditor  controller’s  of¬ 
fice.  “Now  we  need  to  re¬ 
search  who  has  the  bad  ad¬ 
dress  book  that  has  this  ad¬ 
dress,”  he  said. 

Whittington  said  his  office 
was  never  directly  informed 
about  the  problem  by  Car- 
lesten  and  noted  that  any 
county  employees  who  may 
have  received  e-mail  responses 
from  Carlesten  never  brought 
the  matter  to  his  attention. 

Legal  Applicability 

Joanne  McNabb,  chief  of  Cali¬ 
fornia’s  Office  of  Privacy  Pro¬ 
tection,  said  an  initial  review 
of  the  language  contained  in 
California’s  Senate  Bill  1386 
concluded  that  the  privacy  law 
doesn’t  apply  to  local  govern¬ 
ments  in  the  state.  The  law 
stipulates  that  individuals 
must  be  informed  if  their  per¬ 
sonal  information  has  been 
compromised. 

According  to  McNabb,  SB 
1386,  which  went  into  effect  on 
July  1  last  year,  applies  to  “per¬ 
sons  or  entities”  doing  busi¬ 
ness  in  the  state.  Likewise,  the 
Information  Practices  Act, 
which  is  the  California  equiva¬ 
lent  of  the  Federal  Privacy  Act, 
applies  only  to  state  agencies 
and  not  to  local  government 
agencies,  she  said. 

However,  “our  recommen¬ 
dation  beyond  minimum  com¬ 
pliance  with  the  law  is  to  let 
people  know”  that  their  per¬ 


sonal  information  has  been 
compromised,  said  McNabb. 

Whittington  said  the  extent 
of  the  compromise  is  still  un¬ 
der  investigation  and  that  no 
decision  has  been  made  re¬ 
garding  notifying  affected 
employees. 

However,  some  legal  ana¬ 
lysts  said  the  law  does  indeed 
apply  to  the  county.  If  it  does, 
the  Contra  Costa  County  case 
would  be  the  first  major  test  of 
the  new  legislation. 

Harold  J.  Krent,  dean  of  the 
Chicago-Kent  College  of  Law, 
said  it’s  unclear  whether  local 
government  agencies,  even  if 
exempt  from  the  statute,  fall 
within  the  definition  of  the 
term  person  as  contained  in  a 
companion  provision  of  the 
bill.  If  so,  they  would  be  re¬ 
quired  to  notify  individuals  of 
any  breach,  he  said. 

“In  similar  statutory  con¬ 
texts,  ‘person’  has  generally 
been  construed  broadly  to  cov- 


Continued  from  page  1 

ERP  Delays 

ucts  such  as  pipelines  and 
copper  tubing  and  sells 
plumbing  and  electrical  sup¬ 
plies.  The  company  is  in¬ 
stalling  an  F.RP  system  based 
on  PeopleSoft  EnterpriseOne, 
a  line  of  midmarket-oriented 
applications  that  were  devel¬ 
oped  by  J.D.  Edwards  &  Co. 
prior  to  its  buyout  by  People- 
Soft  last  year. 

PeopleSoft  declined  to  dis¬ 
cuss  the  software  rollout  at 
Crane  except  to  say  that  it’s 
largely  complete  and  that  the 
two  companies  are  cooperat¬ 
ing  with  each  other.  “We  con¬ 
tinue  to  have  a  close  working 
relationship  with  Crane  in  the 
ongoing  rollout  of  their  IT 
system,”  said  PeopleSoft 
spokesman  Steve  Swasey. 

Greg  Sedgwick,  Crane’s 
general  manager,  said  two 
weeks  ago  during  a  webcast 
for  investors  that  all  42  of  the 
company’s  manufacturing  and 
warehouse  sites  are  live  with 


PeopleSoft  EnterpriseOne, 
along  with  207  of  its  230  trade 
outlets.  The  rest  of  the  stores 
are  due  to  begin  using  the 
software  this  month,  he  added. 

The  ERP  system  has  more 
than  2,100  active  users  per  day 
and  supports  functions  such 
as  planning,  forecasting,  pro¬ 
curement  and  manufacturing, 
according  to  Sedgwick.  He 
said  Crane  hopes  to  use  the 
system  to  modernize  its  busi¬ 
ness  processes  and  to  add  ca¬ 
pabilities  such  as  support  for 
electronic  data  interchange 
and  collaborative  forecasting 
with  customers  and  suppliers. 

Cause  and  Effect 

Crane  has  made  changes  in  its 
IT  unit  and  at  some  business 
operations  as  a  result  of  the 
rollout  problems.  The  compa¬ 
ny  said  it  named  a  new  corpo¬ 
rate  CIO  who  has  had  exten¬ 
sive  experience  on  ERP  proj¬ 
ects,  consolidating  a  previous 
IT  management  structure  in 
which  its  four  divisions  had 
their  own  CIOs.  Crane  also 
plans  to  downsize  its  IT  de¬ 


partment  by  30  people  after 
the  ERP  rollout  is  finished. 

From  a  business  standpoint, 
the  company  plans  to  take  a 
$21  million  write-down  to  cov¬ 
er  the  cost  overruns  and  pro¬ 
ductivity  losses.  Sedgwick 
said  the  ERP  delays  have  also 
exacerbated  financial  prob¬ 
lems  faced  by  the  company’s 
Tradelink  plumbing  supplies 
unit,  which  plans  to  close  13 
of  its  stores  and  lay  off  200 
workers.  ©  48068 


Crane’s  Response 


TEMPORARILY  HALTED  the 
installation  process  to  review 
its  project  methodology. 

HIRED  an  ERP-seasoned  CIO 
and  gave  him  responsibility 
for  all  IT  operations  in  hopes 
of  improving  coordination  and 
accountability. 

ADDED  other  personnel  with 
project  management  experi¬ 
ence  and  skills. 

MADE  SURE  all  stores  were 
prepared  for  the  rollout. 


Groove  Aims 
To  Boost 
Ease  of  Use 

BY  TODD  R.  WEISS 

Groove  Networks  Inc.  today  plans  to 
release  an  upgrade  of  its  end-user 
collaboration  software  that  it  said  of¬ 
fers  improved  security  and  scalability 
capabilities  as  well  as  better  perfor¬ 
mance  and  ease  of  use. 

Beverly,  Mass.-based  Groove, 
which  is  headed  by  Lotus  Notes  cre¬ 
ator  Ray  Ozzie,  began  beta-testing 
the  Groove  Virtual  Office  3.0  up¬ 
grade  in  March.  The  new  release 
launches  and  transfers  data  more 
quickly  and  lets  end  users  open  mul¬ 
tiple  project  workspaces  without  suf¬ 
fering  noticeable  performance  hits, 
said  Andrew  Mahon,  Groove's  direc¬ 
tor  of  strategic  marketing. 

The  upgrade  also  includes  an 
on-screen  launch  bar  for  managing 
workspaces  and  contacts  with  other 
Groove  users,  as  well  as  Windows 
folder  synchronization  capabilities 
that  let  users  share  any  files  stored 
on  their  PCs.  On  the  server  side, 
Groove  said  it’s  adding  support  for 
third-party  public-key  infrastructure 
user  authentication  tools. 

Ethan  Schoonover,  e-business 
director  at  London-based  ad  agency 
Lowe  &  Partners  Worldwide,  said 
about  300  of  the  company’s  workers 
use  the  existing  Groove  Workspace 
2.5  to  prepare  ad  pitches,  manage 
accounts  and  do  strategic  research. 
Many  of  the  new  features  in  Virtual 
Office  3.0  are  “a  great  example  of  a 
company  really  listening  to  user 
feedback,”  said  Schoonover,  who 
works  in  Hong  Kong. 

The  improved  launch  speed  “ad¬ 
dresses  a  key  issue  with  2.5  -  that 
it  was  sometimes  sluggish,"  said 
Schoonover.  “Even  our  technophobe 
users  could  get  the  hang  of  it.” 

David  Marshak,  an  analyst  at 
The  Patricia  Seybold  Group  Inc.  in 
Boston,  said  Groove’s  key  strength  is 
that  it  combines  real-time  online  col¬ 
laboration  with  the  ability  to  do  work 
off-line  and  then  synchronize  data 
with  other  employees.  Groove’s  inte¬ 
gration  of  those  features  “is  much 
better  than  anyone  else  has  even 
attempted,”  he  said.  ©  48087 
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Mail  Mishap 

YOU’VE  GOT  TO  FEEL  FOR  TOM  WHITTINGTON. 

The  CIO  of  California’s  Contra  Costa  County,  across 
the  bay  from  San  Francisco,  just  found  out  that  copies 
of  hundreds  of  internal  e-mail  messages  containing 
financial  data  and  private  employee  information  have 
been  inadvertently  sent  to  a  Swedish  company  over  the  past  two 
years  (see  story,  page  1). 

It’s  not  as  if  Whittington  sat  on  his  hands,  ignoring  the  problem. 
He  didn’t  know  about  the  address  book  glitch  that  caused  it.  There 
was  no  indication  of  anything  being  wrong.  He  was  blindsided. 
Was  there  anything  he  could  have  done? 


Not  that  I  can  see.  Or  at  least,  not  without  the 
kind  of  unlimited  budget  that  doesn’t  exist  in 
any  real-world  IT  organization,  much  less  in  a 
government  IT  shop  at  the  county  level. 

Actually,  Whittington  was  comparatively 
lucky.  The  e-mails,  many  of  which  were  stuffed 
with  financial  and  personal  data,  were  intended 
for  someone  in  the  county  auditor’s  office.  In¬ 
stead,  they  ended  up  at  Ord&Bild,  a  Swedish  In¬ 
ternet  company.  And  after  they  started  arriving 
there,  Ord&Bild  repeatedly  sent  messages  to 
tell  senders  of  the  wayward  e-mails  about  the 
problem,  according  to  Ord&Bild  managing  di¬ 
rector  Robert  Carlesten. 

But  those  messages  got  no  response.  And  no¬ 
body  told  Whittington  about  the  messages.  He 
didn’t  learn  about  the  problem  until  Carlesten 
contacted  Computers orld  reporter  Dan  Verton, 
who  called  Whittington. 

Whittington  was  lucky  that  the  data  was  kept 
confidential  and  not  put  to  some  malicious 
use.  But  he  would  have  been  a  lot  luckier  if 
there  hadn’t  been  any  wayward  e-mails  in  the 
first  place. 

But  what  could  he  have  done  to  prevent  it? 
What  can  he  do  to  keep  it  from  hap¬ 
pening  again?  That’s  what  Whitting¬ 
ton  and  his  staff  are  trying  to  figure 
out  now.  None  of  the  obvious  op¬ 
tions  are  very  good. 

Cut  off  the  e-mail  system  from 
the  rest  of  the  Internet?  That  would 
protect  the  data,  but  then  residents 
couldn’t  use  e-mail  to  communicate 
with  their  government. 

Put  in  two  parallel  e-mail  systems 
—  one  for  internal  messages  and  an¬ 
other  for  e-mail  going  to  the  outside 
world?  That’s  a  huge  kludge  for 
users  to  navigate. 


Install  outgoing-mail  whitelists  (which  specify 
legal  destination  addresses)  or  blacklists  (which 
list  addresses  that  mail  won’t  be  delivered  to)? 
That’s  impractical  —  whitelists  are  too  restric¬ 
tive,  and  blacklists  can  never  be  comprehensive. 

Eliminate  address  books  from  county  users’ 
machines  so  they  have  to  type  addresses  manu¬ 
ally?  That  would  have  avoided  the  glitch  that 
caused  the  misdirected  e-mails:  a  garbled  ad¬ 
dress  in  one  user’s  address  book.  But  it  would 
generate  many  more  mistyped  addresses. 

Set  IT  staffers  to  work  poring  over  outgoing 
e-mail  logs,  looking  for  potentially  inappropriate 
destination  addresses?  That  would  be  spectacu¬ 
larly  labor-intensive  and  would  generate  huge 
numbers  of  false  positives  to  investigate.  And 
how  would  they  know  what  to  look  for,  anyway? 

The  perfect  solution  might  be  to  somehow 
tag  sensitive  data  so  it  could  be  automatically 
blocked  at  the  firewall.  That  would  only  require 
rebuilding  all  the  county’s  systems  from  the 
ground  up,  embedding  tags  in  all  the  data  and 
then  customizing  the  e-mail  system  to  make 
sure  the  tags  don’t  get  removed.  Good  luck  get¬ 
ting  the  budget  for  that  past  the  county  board. 

Whittington’s  team  is  still  inves¬ 
tigating  what  happened  and  what 
to  do  next.  Whittington  himself 
hopes  better  training  for  users  and 
clearer  policies  about  attaching 
data  to  e-mails  will  help. 

Think  there’s  a  better  way?  Whit¬ 
tington  would  like  to  hear  it.  So 
would  the  rest  of  us. 

Because  what  happened  to  Tom 
Whittington  and  Contra  Costa 
County  is  just  waiting  to  happen  to 
every  other  organization.  And  the 
next  one  the  problem  hits  may  not 
be  so  lucky.  ©  48030 


frank  hayes.  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerworid.com. 


Not  What  We  Had  in  Mind 

It’s  the  1990s,  and  this  training  director  pilot  fish 
orders  a  PC  so  his  office  can  be  the  last  one  finally 
connected  to  the  LAN.  “Because  of  the  way  purchas¬ 
ing  worked, !  had  separate  requests  for  a  computer 
system  and  a  printer,”  fish  says.  “It  was  like  Christmas 
morning  the  day  I  saw  the  printer  box  in  the  office.  The 
feeling  didn’t  last  long,  however.  My  boss,  the  HR 
manager,  approved  the  purchase  of  the  printer  -  but 
denied  the  request  for  a  computer.” 

This  VP  demands  SHARK 
a  high-end  PC  TANK* 


to  show  his  tech- 
sawiness.  But  he  never 
actually  turns  it  on,  so 
support  techs  start  using 
it  as  a  supply  dump, 
swapping  out  the  VP’s 
working  components  for 
items  that  break  on  oth¬ 
er  users’  PCs.  “A  year 
later,  he  was  let  go,” 
says  IT  director  pilot 
fish.  “New  VP  comes  in 
and  on  the  first  day  at¬ 
tempts  to  fire  up  the 
computer.  I  had  to  go 
over  to  explain  what  my 
staff  had  done.  It  got 
quite  a  chuckle  out  of 
everyone  -  and  a  new 
desktop  was  ordered.” 

What  a  Surprise 

User  explains  to  support 
pilot  fish  that  her  CD- 
ROM  drive  was  sticking 
so  she  sprayed  it  with 
WD-40.  What?  says 
astonished  fish.  You 
sprayed  WD-40  into  the 
CD-ROM  drive?  “Oh 
yes,”  user  says.  “But 
that  hasn’t  fixed  it.” 

Communication! 

This  site's  sysadmins  de¬ 
cide  to  install  an  operat¬ 
ing  system  service  pack 
across  the  network  -  but 
they  don’t  tell  users  or 
the  help  desk.  As  the  up- 
fl©*©  SSOWly  IfiSteillS 
users  get  impatient  and 
call  for  help.  “The  opera¬ 


tor  at  the  help 
desk  told  them 
to  just  shut  off 
the  computer 
:  by  holding  the  power 
|  button  in  for  a  few 
j  seconds,”  groans  IT 
|  pilot  fish  on  the  scene, 
j  “Around  100  machines 
j  were  powered  off  during 
!  the  installation  and 
|  wouldn’t  reboot.  Techs 
I  had  to  go  to  every  office 
I  to  get  them  running 
j  again.” 

i  And  the  Problem 
j  Is  What,  Exactly? 

j  Support  pilot  fish  spots 
j  a  help  desk  ticket  he’s 
j  glad  he  doesn’t  have  to 
;  handle:  “Floppy  drive 
i  unable  to  read  CD-ROM. 

\  Please  fix  ASAP!” 

|  Yeah,  That’ll  Help 

j  Network  admin  pilot  fish 
j  is  setting  up  a  new  lap- 
j  top  when  it  picks  up  a 
|  wireless  connection  - 
|  which  turns  out  to  be 
j  from  another  company 
|  in  the  office  complex.  “I 
j  head  over  to  give  them  a 
j  heads-up  that  they’re 
|  broadcasting  in  the 
|  clear,  with  no  airthenti- 
;  cation  required,”  fish 
j  says.  On  the  CIO’s  desk 

l  III©  wlFGISSS 

I  router,  and  he  explains 
j  that,  by  using  it,  anyone 
j  can  access  the  CIO’s 
j  network.  “OK,"  CIO  says 
I  agreeably.  “I’ll  turn 


OTURN  IT  UP  FOR  SHARKY.  Send  your  true  tale  of  IT 
life  to  sharky@computerworid.com.  You  get  a  sharp 
Shark  shirt  if  I  use  it.  And  check  out  the  daily  feed,  t 
the  Sharkives  and  sign  up  for  Shark  Tank  home  c 
somputerworid-oom^liarky. 
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IT  LEADERS  2005 


Nominate  an 
outstanding  IT  leader 
for  Computerworld’s 
Premier  100  IT  Leaders 
2005 Awards  program 


EACH  YEAR,  Computerworld  editors  conduct  a  nationwide  search  for 
IT  managers  and  executives  who  show  technology  leadership  in  their 
organizations.  This  prestigious  awards  program  recognizes  and  honors 
IT  professionals  from  a  wide  range  of  industries,  drawing  attention  to  the 

innovative,  business-critical 
work  they  do. 

ELIGIBLE  NOMINEES  include 
CIOs,  CTOs,  vice  presidents, 
IT  directors  and  managers 
from  user  companies,  nonprof¬ 
its,  the  computer  industry  and 
the  private  sector. 

HONOREES  will  be  announced 
in  Computerworld’ s  Jan.  3, 
2005,  issue  and  will  be  our 
guests  at  the  6th  Annual 
Premier  100  IT  Leaders 
Conference,  March  6-8, 

2005,  in  Scottsdale,  Axiz. 
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EXCLUSIVE 

Who  Qualifies? 


IT  managers  and 
executives  who 

■  Effectively  manage  IT  and 
business  strategies 

■  Envision  innovative 
approaches  to  business 
problems 

■  Foster  great  ideas  and 
creative  work  environments 

■  Excel  at  vendor  and  supplier 
management 

■  Take  calculated  risks  and 
learn  from  failure 


Deadline  has  been  extended  to  July  30! 

Go  online  to  nominate  an  IT  leader  at  computerworid.com/p100nominations  or  O  QuickLink  a3420. 
Questions?  Contact  us  by  e-mail  at  premier100@computerworld.com. 


HP  Blades,  now  in  a  bundle,  which  is  exactly  what  you'll  save. 


Save  over  30%  with  our  blade  bundle  featuring  two  HP  ProLiant  BL20p  Blade  Servers,  powered  by  Intel®  Xeon™  processors,  and  get  the 
power  to  make  network  management  simple  and  affordable.  You'll  save  on  deployment  time  too,  thanks  to  this  ready-to-go  package. 
Sure,  modular  design  leaves  room  to  expand  later,  but  HP  Blade  Servers  can  also  make  a  big  impact  on  your  total  cost  of  ownership  in  the 
meantime.  Our  management  software  boosts  productivity  and  cuts  reconfiguration  efforts  from  days  to  minutes.  And  because  your  time 
is  money,  the  BL20p  features  fully  redundant  technologies  to  reduce  costly  downtime.  While  our  #1  ranking  in  lntel's-based,  server-customer 


satisfaction  is  one  reason  we  recently  became  the  first  to  sell  over  1 00,000  blade  servers,  there's  more  than  one  reason.  You  also  get  the 
advice  and  support  of  HP  and  our  local  partners  — well  before  and  long  after  you  buy.  Even  when  you  buy  at  more  than  30%  off. 


Save  33% 

Get  the  HP  ProLiant  BL20p  bundle, 
and  you'll  save  big  compared  to 
the  cost  of  buying  the  two  servers 
and  accessories  separately. 


HP  PROLIANT  BL20p  BLADE 
SERVER  BUNDLE _ 

^  Lease  tor  as  low  as 

y  j  $375  a  month1 

•  (2)  BL20p  Blade  Servers 
Each  Blade  Server  includes: 

-  (2)  Intel®  Xeon,M  processors  3.06GHz-512k 

-  (3)  10/100/1000  NICs  +  (1)  10/100  iLO  NIC 

-  1GB  DDR  memory3 

•  p-Class  blade  enclosure 

•  p-Class  single  phase  power  enclosure 
with  2  power  supplies 

•  Mini  bus  bar  kit 

•  (8)  Rapid  Deployment  Pack  licenses 


invent 


Download  information  about  HP  Blade  servers. 

Read  a  white  paper  highlighting  total  cost  of  ownership  and  the  Factiva  and 
iSource  case  studies  demonstrating  ROI. 

CALL 

1-877-726-8116 

CLICK 

hp.com/go/blades4 

VISIT 

your  local  HP  reseller 

Offer  available  when  bought  direct  from  HP  or  from  participating  authorized  resellers.  Prices  shown  are  HP  direct  prices;  reseller  and  retailer  prices  may  vary.  Prices  shown  are  subject  to  change  and  do  not  include  applicable  state  and  local  sales  taxes  or  shipping  to  recipient's 
destination.  HP  is  not  liable  for  editorial,  pictorial  or  typographical  errors  in  this  advertisement.  Photography  may  not  accurately  represent  exact  configurations  priced.  Offers  cannot  be  combined  with  any  other  offer  or  discount  and  are  good  while  supplies  last.  Limited  order  quantities. 
Promotions  void  where  prohibited  or  restricted  by  law.  ’Implicit  lease  rate,  assuming  lessee  does  not  exercise  a  fair-market-value  purchase  option  at  the  end  of  the  lease  term  and  timely  returns  the  leased  equipment  to  Hewlett-Packard  Financial  Services  Corporation  (HPFSC)  at 
the  end  of  the  lease  term  and  disregarding  any  charges  payable  by  lessee  other  than  rent  payments  (such  as  taxes,  fees  and  shipping  charges).  Lease  products  available  through  HPFSC  to  qualified  commercial  customers  in  the  U.S.  and  subject  to  credit  approval  and  execution  of 
standard  HPFSC  documentation.  Other  restrictions  may  apply.  HPFSC  reserves  the  right  to  change  or  cancel  this  program  at  any  time  without  notice.  For  more  information,  call  1  -888-277-5942.  *For  hard  drives,  GB=billion  bytes.  Certain  warranty  restrictions  and  exclusions  may  apply. 
For  complete  warranty  details,  call  1  -800-345-1518  (U.S.).  Intel,  Intel  Inside,  the  Intel  Inside  Logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  ©2004  Hewlett-Packard  Development  Company,  L.P. 


